CI CD Security

21 Apr Inject Environment Variables to the Build Process Securely

Posted at 09:00h in CI CD Security, Must Read by Fátima Said 0 Comments

Inject environment variables to the build process securely. Learn how to prevent leaks and protect secrets in CI/CD pipelines....

Read More

30 Mar ReDoS Explained: What Regular Expression DoS Is and How to Prevent It

Posted at 19:31h in CI CD Security, Code Security by Fátima Said 0 Comments

ReDoS attacks can crash your apps. Discover how vulnerable regex patterns work and how to detect and prevent them with modern AppSec practices....

Read More

12 Nov MCP Security: Protecting the Model Context Protocol

Posted at 17:14h in AI, CI CD Security, Code Security, Open-Source Security, SDLC by Fátima Said 0 Comments

Learn model context protocol and MCP security basics plus MCP server security best practices for safer AI–DevOps. ...

Read More

04 Nov YAGNI and Secure Code: Why “Not Yet” Can Save You From Bugs

Posted at 10:30h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

29 Oct Access Control List in CI/CD: The Hidden Risk Behind Simple Permissions

Posted at 12:14h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

28 Oct NPM i -s and the Hidden Risks in Your Dependencies

Posted at 11:43h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

22 Oct When Git remote set-url Becomes a Supply Chain Risk

Posted at 11:53h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

22 Oct File Infector Virus in Code Repositories: What Devs Need to Watch For

Posted at 11:00h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

21 Oct Jenkins Security FAQs: Everything You Need to Know

Posted at 18:02h in CI CD Security by Fátima Said 0 Comments

Learn how to apply jenkins security best practices, protect pipelines, and strengthen security jenkins workflows for reliable automation....

Read More

21 Oct Attribute-Based Access Control in CI/CD: Enforcing Policies Beyond Roles

Posted at 10:47h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

21 Oct What Does Whitelist Mean in Cybersecurity (and Why Devs Should Stop Using It)?

Posted at 10:09h in CI CD Security by Stefano Gasperi 0 Comments

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation....

Read More

16 Oct Zero Day Vulnerability: Detect and Block Attacks Early

Posted at 18:53h in Attacks Analysis, CI CD Security, Code Security, Open-Source Security, SDLC by Fátima Said 0 Comments

Learn what a zero day vulnerability is, how a zero day exploit works, and how to stop zero day vulnerability exploits early....

Read More