DevSecOps articles
Secure CI/CD, secret scanning, SAST/DAST, containers, and pipeline automation
Learn how to integrate security into development pipelines using secure coding, secret scanning, dependency checks, container scanning, CI/CD security, and automation.
Collection snapshot
—
Published articles in this collection
Best for: Developers, platform engineers, and AppSec champions in delivery teams
…
Published articles
8
Example topics
3
Learning paths
How to use this collection
Read → apply → reference
Each article is written as a practical knowledge block you can use on the job, in labs, or during audits.
Learn the concept
Understand the threat, control, or workflow with clear explanations.
Follow the checklist
Apply steps, commands, or evidence collection in your environment.
Connect to practice
Jump to related labs, tutorials, and tools to reinforce skills.
Example topics in this collection
- Secure CI/CD
- Secret scanning
- SAST
- DAST
- Dependency scanning
- Docker security
- Kubernetes security
- GitHub security
Catalog
Articles in devsecops
Practical guides, checklists, and explainers focused on this security domain.
Outcomes
What you'll learn
- Integrate security gates into CI/CD without blocking delivery velocity
- Scan repositories, dependencies, and container images for known risks
- Automate policy checks and remediation workflows in modern pipelines
- Align engineering practices with compliance and secure release standards
More topics
Explore other article collections
Jump between fundamentals, offensive security, blue team, cloud, compliance, and more.
Cybersecurity Fundamentals
Core security concepts, threat models, and the mindset every defender needs
View collectionEthical Hacking & Penetration Testing
Recon, testing workflows, exploitation basics, and professional reporting
View collectionWeb Application Security
OWASP risks, injection flaws, access control, APIs, and secure development
View collectionLinux Security
SSH hardening, permissions, auditd, firewalls, logging, and CIS controls
View collectionSOC & Blue Team
SIEM alerts, log analysis, triage workflows, and blue-team investigation
View collectionIncident Response
Detect, contain, investigate, eradicate, recover, and learn from incidents
View collectionCloud Security
IAM, logging, network controls, storage security, and misconfiguration detection
View collectionCompliance & GRC
Frameworks, controls, audit evidence, policies, and GRC workflows
View collectionSecurity Tools & Platforms
Practical guides for scanners, SIEM, testing, and investigation platforms
View collectionNetwork Security
Segmentation, firewalls, VPNs, DNS, IDS/IPS, and packet analysis
View collectionCryptography
Encryption, hashing, TLS, certificates, signatures, and key management
View collection