Topic

DevSecOps and CI/CD

Pipelines, dependencies and the software supply chain: the controls that run before code reaches production.

The vulnerability nobody wrote

A free GitHub account was enough to puppeteer the pipelines of Microsoft, Google, Apache and Cloudflare. Here is why your scanner never saw it coming, and what AI coding is about to do to the problem.

RSS feed

Newsletter

Build Security In

The engineering side of security: secure coding, DevSecOps, AI code and NIS2, for teams who ship. One email per new issue.