← Blog // TAG

DevSecOps

2 articles

DevSecOps Harden your Dockerfile: the anti-patterns that give an insecure container away A Dockerfile that works is not a secure Dockerfile. The anti-patterns a linter checks —root, :latest, secrets in ENV, c… Read → Blue Team A secret in git isn't deleted, it's rotated (and why) You commit an API key by mistake, delete it in the next commit and relax. Don't: it stays in history. Why it happens, w… Read →