close

DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Wire Dotguard Into GitHub Actions: A Full-Repo Secret Scan in One YAML Block

Wire Dotguard Into GitHub Actions: A Full-Repo Secret Scan in One YAML Block

Comments
9 min read
Stop Pasting Secrets Into the Console: A Secure Debugging Checklist

Stop Pasting Secrets Into the Console: A Secure Debugging Checklist

Comments
11 min read
Audit Force-Pushes and Rewritten History Without a Git Server

Audit Force-Pushes and Rewritten History Without a Git Server

Comments
9 min read
Who Can Still Push to main? An Access and Process Audit in 30 Seconds

Who Can Still Push to main? An Access and Process Audit in 30 Seconds

Comments
10 min read
How Enterprises Govern AI Agents: Practices That Work in Production

How Enterprises Govern AI Agents: Practices That Work in Production

Comments
11 min read
Hallucinations in Regulated Workflows: Catch Them at the Gateway with Bifrost

Hallucinations in Regulated Workflows: Catch Them at the Gateway with Bifrost

Comments
15 min read
Clean Start, Clean Deps: Why Template Choice Affects Your Security Posture

Clean Start, Clean Deps: Why Template Choice Affects Your Security Posture

Comments
9 min read
Authentication & Authorization — JWT & OAuth 2.0

Authentication & Authorization — JWT & OAuth 2.0

Comments
2 min read
Building Dotguard: What Writing Detection Rules Taught Me About Developer Habits

Building Dotguard: What Writing Detection Rules Taught Me About Developer Habits

Comments
9 min read
I Threw the Box Away. The Damage Was Already Done.

I Threw the Box Away. The Damage Was Already Done.

Comments
3 min read
AI Gateway Audit Logs: Feed LLM Traffic Into Your SIEM with Bifrost

AI Gateway Audit Logs: Feed LLM Traffic Into Your SIEM with Bifrost

Comments
13 min read
Building a CMS with AI Agents: You Don't Write the Code, You Audit the Decisions

Building a CMS with AI Agents: You Don't Write the Code, You Audit the Decisions

Comments
10 min read
I said no data was leaving. On the first good run, two records left

I said no data was leaving. On the first good run, two records left

Comments
3 min read
JWT Claim Validation at the Edge: Scope Inflation, Audience Misrouting, and the RBAC Boundary Problem

JWT Claim Validation at the Edge: Scope Inflation, Audience Misrouting, and the RBAC Boundary Problem

Comments
6 min read
ShrekOS in two diagrams: giving an agent exactly one folder and one hostname

ShrekOS in two diagrams: giving an agent exactly one folder and one hostname

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.