devsecops – ITFROMZERO – Share tobe shared!

Git Secret Scanning: How to Use TruffleHog to Find API Key Leaks in Commit History

By admin September 12, 2026

Detect and handle leaked API keys in Git history using TruffleHog. A detailed guide on deep scanning, secret verification, and setting up pre-commit hooks for source code security.

Security

Runtime Security Monitoring with Tracee: The eBPF ‘Magic Eye’ for Linux Systems

By admin August 25, 2026

Hackers using fileless malware or container escapes? Don't worry, Tracee with the power of eBPF helps you capture every anomaly on Linux with high performance.

Security

Securing Kubernetes Network Policy: Stopping ‘Lateral Movement’ in the Cluster

By admin August 25, 2026

Don't leave your K8s cluster exposed to hackers. Learn how to configure Network Policies to isolate Pods, block lateral movement attacks, and effectively implement Zero Trust.

Security

Kubernetes Security: Stopping Root Containers with PSS and Admission Controllers

By admin August 24, 2026

Don't let your Kubernetes cluster be compromised by misconfigurations. A detailed guide on using PSS and Kyverno to block root containers based on real-world experience.

Security

Guide to Installing DefectDojo on Docker: Centralized Vulnerability Management for DevSecOps

By admin August 13, 2026

Vulnerability management is no longer a headache with DefectDojo on Docker. Detailed guide on installation, importing scan results, and API automation for DevSecOps.

Security

Mastering Cilium Tetragon: Monitoring and Blocking Runtime Attacks with eBPF

By admin August 9, 2026

A detailed guide on using Cilium Tetragon for monitoring and securing Linux Runtime based on eBPF technology. This article shares quick installation steps, how to write TracingPolicy, and real-world experience to protect servers from attacks.

Security

SBOM: The “X-Ray” for Dependency Analysis and Vulnerability Scanning with Syft & Grype

By admin May 19, 2026

Learn how to use Syft and Grype for dependency analysis and automated vulnerability scanning. Secure your software supply chain with SBOM – a modern security standard for SREs and DevSecOps.

Security

Hunting Security Vulnerabilities with Semgrep: Fast, Accurate, and Extremely Easy Rule Writing

By admin May 18, 2026

Learn how to use Semgrep for automated source code analysis, quickly detect security vulnerabilities, and effectively integrate into CI/CD workflows for developers.