▶ Videos →

📰 Dev.to · Hariharan

6 articles · Updated every 3 hours · View all reads

All Articles 114,355 Blog Posts 123,329 Tech Tutorials 29,211 Research Papers 23,298 News 16,955 ⚡ AI Lessons

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 6: The Full Pipeline

Dev.to · Hariharan ⚡ AI Lesson 2mo ago

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 6: The Full Pipeline

If you've followed along from Part 1, we have built five separate scanning workflows. This final part...

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 5 - Container Scanning with Trivy

Dev.to · Hariharan ☁️ DevOps & Cloud ⚡ AI Lesson 2mo ago

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 5 - Container Scanning with Trivy

The previous parts secured the code and the infrastructure. This part secures the container image —...

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 4 - IaC Scanning with Checkov

Dev.to · Hariharan 2mo ago

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 4 - IaC Scanning with Checkov

The previous parts covered application security — secrets, code vulnerabilities, and dependency CVEs....

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 3 - SCA with pip-audit

Dev.to · Hariharan 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 3 - SCA with pip-audit

Parts 1 and 2 covered the code you write — secrets and static vulnerabilities in app.py. But modern...

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 2 - SAST with Bandit

Dev.to · Hariharan ⚡ AI Lesson 2mo ago

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 2 - SAST with Bandit

Part 1 covered secret scanning with Gitleaks — catching credentials before they reach the repo....

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 1 - Secret Scanning with Gitleaks

Dev.to · Hariharan ⚡ AI Lesson 2mo ago

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 1 - Secret Scanning with Gitleaks

Secret Scanning with Gitleaks I have built a deliberately vulnerable Flask app to use as a...