#sast

TCH

JA Jayriniv

Part 2: What The Scanners Found (Before I Knew What Mattered)

With an honest confession about tool limitations.

Jun 17, 2026 · 3 min read · 0 claps #semgrep #appsec #sast

SCI ECO

OU Oğuzhan karadağ

Mini Demo: Secure Pipeline with SAST, SCA, Secret Scanning, SBOM, and Signing

A compact demo showing which evidence artifacts each security gate can produce.

Jun 11, 2026 · 2 min read · 0 claps #devsecops #sast #sbom

OU Oğuzhan karadağ

Mini Demo: SAST, SCA, Secret Scanning, SBOM ve Signing ile Güvenli Pipeline

Küçük bir demo repo üzerinde security gate modelinin hangi kanıtları ürettiğini adım adım görmek.

Jun 11, 2026 · 2 min read · 0 claps #sast #ca #sbom

TCH AI

AB Abrar Bin Habib

Getting Started in API Penetration Testing

The 4 attack vectors and 3 testing methods every beginner needs to know.

Jun 06, 2026 · 5 min read · 0 claps #api-penetration-testing #sast #cybersecurity

AI TCH

DA Daniel Hammon

Shift Agentic

Shift Agentic is the practice of embedding security controls, guidance, and feedback loops directly into AI coding agent workflows so that…

May 29, 2026 · 2 min read · 3 claps #ai-security #appsec #sast

ECO TCH

RA Raman Garg

Understanding AI-Native Security (Part 1)

What Does “AI-Native Security Research” Actually Mean?

May 24, 2026 · 8 min read · 0 claps #vulnerability-management #cybersecurity #ai-security

TCH

NG Ngowry

🔐 Building a Secure DevSecOps CI/CD Pipeline with SAST, DAST & Secret Scanning

Building a Secure DevSecOps CI/CD Pipeline with SAST, DAST & Secret Scanning

May 21, 2026 · 1 min read · 0 claps #devsecops-practices #sast #dast

TCH

BE Belva Ghani Abhinaya

Zero Tolerance: Building a Fortress of Code Quality Through CI/CD, Behavioral Testing, and Absolute…

In the software development lifecycle, there is a highly dangerous comfort zone for engineers: accepting the “Good Enough” principle.

May 11, 2026 · 5 min read · 0 claps #code-quality #behavioral-testing #load-testing

TCH AI

RA Ramon Invarato

CI (Continuous Integration): analysis, tests, quality, and security — Jarroba

Complete CI diagram

Apr 25, 2026 · 16 min read · 0 claps #devops #ci-cd-pipeline #software-testing

AI

SU Suraj Vishwakarma

How to Find Real Vulnerabilities Using Source -> Flow -> Sink

There are several mental models worth building as a security engineer. This is one of the more practical ones — and one that’s often…

Apr 25, 2026 · 5 min read · 0 claps #application-security #sast #secure-code-review

TCH

PR Pras' Labs: The Hands-On Engineer

CI/CD Lab 03: SAST and Static Analysis in Gitlab CI

The SAST stage is the first layer of the pipeline that actually reads the code for what it does, not just what it looks like.

Apr 21, 2026 · 8 min read · 51 claps #devops #gitlab-ci #sast

TCH

AM Ambrish Vadnerkar · DevOps.dev

SAST and DAST Scanning in DevOps: From Basics to Practical Implementation in Your CI/CD Pipeline

Security can no longer be an afterthought bolted onto the end of the software development lifecycle. With teams shipping code multiple…

Apr 16, 2026 · 11 min read · 2 claps #devsecops #sast #dast

GEN TCH

PU Puja Maheshvari

From GitHub Advanced Security to Snyk: What I Learned Migrating Security at Scale From GitHub…

Security tools look great in demos. But things get very different when you manage them across multiple repositories and teams.

Apr 13, 2026 · 3 min read · 1 claps #agh #snyk #migration

TCH

VI Vitor Hansen · DevOps.dev

Adding Secret Scanning and SAST to Your Projects in 15 Minutes

Security should not be an afterthought in the development lifecycle. Whether you work solo or with a team, integrating security early helps…

Jul 11, 2025 · 2 min read · 0 claps #devsecops #github-actions #security-first

TCH

AA Aaron Dhobi · DevOps.dev

Security scanning your Terraform!

Ensure your Terraform code is secure with TFSec! Scan for vulnerabilities, enforce best practices, and integrate into CI/CD.

May 29, 2024 · 4 min read · 0 claps paywalled #terraform #sast #security-scanning

TCH

AB Abhishekbhilarea B

The Ultimate SAST Cheat Sheet for Developers

Introduction

Mar 14, 2024 · 6 min read · 2 claps #devops #sast #sonarqube

TCH

LU Luthfi Anandra · AWS in Plain English

Run Static Application Security Testing (SAST) for Terraform AWS Code Using tfsec in GitHub Actions

Static Application Security Testing (SAST), as quoted from article from Aqua Security is a code testing tool that analyzes application…

May 17, 2023 · 4 min read · 1 claps #aws #github-actions #sast