Xygeni Logo White
Start Free
Book a demo

Category: CI/CD Security

Must-Read Posts

Docker Build -t - docker build command - docker build -t option

Docker Build -t Explained: Secure Image Tagging in Your Pipeline

Use the docker build command securely. Master the docker build -t option for safe image tagging, traceability & CI/CD pipeline integrity
4 min read
server side template injection - ssti vulnerability - ssti payloads

Server Side Template Injection Explained with Real Code Examples

See real Jinja2, Twig, and Velocity SSTI payloads, how server-side template injection leads to RCE, and how to stop it in CI/CD pipelines.
5 min read
docker registry - container registry -malicious docker images

Securing Your Docker Registry: Don’t Let Malicious Images Into Your Pipeline

Secure your Docker registry from malicious Docker images. Learn how to lock down pipelines and prevent poisoned builds in our post!
4 min read
Function Result 2 Error Code 0 - error: gradle task assembledebug failed with exit code 1

Function Result 2 Error Code 0 in CI/CD: What It Really Means

Understand Function Result 2 Error Code 0, exit code -1, and error: gradle task assembleDebug failed with exit code 1 to secure your CI/CD.
4 min read
try except python - python try except else

Python Try Except Blocks: Debugging vs. Security Trade-Offs

Safer error handling: best practices for Python try except and avoiding hidden failures & practical tips for try except python in CI/CD.
4 min read
error: gpg check failed - error: gpg failed to sign the data - gpg error

Why Error: GPG Check FAILED in Your Build (and How to Fix It Securely)

Fix “error: gpg check failed” & “error: gpg failed to sign the data” securely in builds. Learn causes, risks & DevSecOps best practices!
4 min read
cyber threat hunting - threat hunter

Threat Hunting with Code: How to Track Malicious Patterns in Repos

Learn how cyber threat hunting in repos, commits, and pipelines helps every threat hunter detect malicious code early and secure the SDLC.
4 min read
different types of security tags and how to remove them

Different Types of Security Tags and How to Remove Them Safely

Learn different types of security tags and how to remove them, asset tagging in vulnerability scanner, and git tag best practices.
6 min read
laravel 11.30.0 exploit - laravel exploit - laravel 11.30.0 vulnerabilities

Laravel 11.30.0 Exploit: What Devs Must Patch Now

Critical Laravel 11.30.0 exploit exposes apps to full compromise. Learn how to patch Laravel 11.30.0 vulnerabilities & secure configs CI/CD!
4 min read
session hijacking prevention - session hijack

Session Hijacking: The Code and Config Mistakes That Open the Door

Learn how bad code and CI/CD misconfigs enable a session hijack, and apply session hijacking prevention to secure tokens, cookies & builds!
3 min read
python try catch - try catch python - try and catch python

Python Try Catch: When Error Handling Becomes a Risk

Misused python try catch blocks can hide failures and risks. Learn safer try and catch python patterns to secure apps and CI/CD pipelines.
48 min read
Vulnerability Management Automation in DevSecOps

Vulnerability Management Automation in DevSecOps

Discover how vulnerability management automation, risk-based prioritization, and defenses against malicious npm packages secure DevSecOps.
3 min read
Load More