#devsecops

Articles tagged with "devsecops"

Aug 17, 2026 #k3s #kubernetes #gitlab #ci-cd #devsecops #admission-controller

Why GitLab Auto DevOps' 'It Just Works' CI Is the Closest Threat to Your Production K3s Cluster

GitLab Auto DevOps runs SAST/DAST automatically the moment you turn it on. But a scan 'running' and a vulnerable image never reaching your production K3s cluster are two completely different things. Here's how to build an audit gate between CI/CD and the cluster.

May 27, 2026 #devsecops #ci-cd #security #supply-chain #slsa #kubernetes

ci-cd Pipeline Security: A Practical DevSecOps Guide

A practical guide to ci-cd pipeline security from a DevSecOps perspective. Covers SAST/DAST, supply chain protection, the SLSA framework, and Policy as Code.

May 27, 2026 #docker #security #vulnerability-scanning #trivy #snyk #container-security #devsecops

Docker Container Security: Scanning and Vulnerability Management

A practical guide to integrating vulnerability scanning into your container ci-cd pipeline. Compare Trivy, Snyk, and Grype, implement shift-left security, and build defense-in-depth with Harbor.