Category: CI/CD Security

python try catch - try catch python - try catch block

Python Try Catch Blocks: When Error Handling Becomes a Risk

How Python try catch blocks work, when try catch Python patterns turn risky & best practices to secure your code with safe error handling!
JavaScript Obfuscator - JavaScript deobfuscator - JavaScript malware

Why JavaScript Obfuscator Tools Are Abused by Attackers (And How to Detect Them)

Learn how JavaScript Obfuscator tools are misused to hide JavaScript malware, and how to detect threats before they reach production!
spoofing attack - spoofing definition - what type of attack relies on spoofing

Spoofing Definition for Developers: What You Need to Know About These Attacks

Learn the spoofing definition, how an attack works, and what type of attack relies on spoofing to protect your code and pipelines in our post
markdown cheat sheet - Markdown guide - Markdown tips and tricks

Markdown Cheat Sheet: Tips to Prevent Injection and Formatting Errors

Explore our Markdown Cheat Sheet, and Markdown tips and tricks to prevent formatting errors, automation bugs, and security risks!
Checksum errors

Checksum Errors Explained: How to Detect and Prevent Integrity Failures

Learn what checksum errors are, why they matter, and how to prevent checksum integrity failures in CI/CD pipelines & software supply chains!
error pg_config executable not found

Getting error: pg_config executable not found? Fix Your Python Build the Secure Way

Fix the "pg_config executable not found" error securely in CI/CD, Docker, or dev. Learn safe installs & prevent supply chain risks here!
TOP 10 INDICATORS OF COMPROMISE

Top 10 Indicators of Compromise in CI/CD Pipelines

Discover what are indicators of compromise in IOC cybersecurity and how to protect CI/CD pipelines from hidden threats.
9 min read
what is deserialization - remote code execution

How Insecure Deserialization Becomes Remote Code Execution (and How to Catch It Before Merge)

Learn what is deserialization & how unsafe use can escalate to remote code execution. Spot risks, artifacts and CI/CD before they ship!
sql substring_index - substring_index in sql - string functions in sql

The Hidden Security Pitfalls of SQL SUBSTRING_INDEX

Misused string functions in SQL can leak data or break tenant isolation in critical systems. Learn the hidden risks of sql substring_index!
OpenSSL s_client - ssl error - TLS security

OpenSSL s_client Showed My TLS Was Broken: Diagnosing SSL Errors in CI

Fix SSL errors fast with OpenSSL s_client. Learn how to diagnose TLS security issues in CI/CD, before they break builds!
NPM SECURITY - npm packages - NPM install

Npm Security FAQs: Everything You’ve Ever Wondered

Get answers on npm security, npm install safety, and npm packages. Learn how to secure dependencies and avoid supply chain risks.
12 min read
package.json - package-lock.json - typosquatting

A Typo in package.json Let a Lookalike Package Compromise the Pipeline

A single typo in package.json and a hidden entry in package-lock.json can enable typosquatting & malware in your CI/CD. Learn how to stop it!