Security – Page 4 – ITFROMZERO

Kaniko: Building “Clean” and Secure Docker Images Without Root Privileges

By admin April 22, 2026

Build Docker images securely without root privileges or a Docker Daemon. A detailed guide on using Kaniko to optimize security and performance for your CI/CD pipelines.

Centos

OpenSCAP: The Automation ‘Weapon’ for PCI-DSS Security Audits on CentOS for DevOps

By admin April 21, 2026

Don't let security audits become a nightmare. Discover how to use OpenSCAP to automate vulnerability scanning and PCI-DSS compliance on CentOS/RHEL based on real-world DevOps experience.

Security

Securing SSH with Hardware Security Keys (FIDO2/Yubikey): When Private Keys Are No Longer a ‘Fatal Weakness’

By admin April 20, 2026

Hardening server security with Hardware Security Keys (Yubikey/FIDO2). A detailed guide on setup, using Resident Keys, and configuring servers to prevent private key leaks.

Security

Auditd Configuration Guide: The “Black Box” for Tracking Every Change on Linux

By admin April 20, 2026

Hackers can wipe history but they can't hide from Auditd. A guide to configuring the Linux "black box" to trace file edits, command execution, and overall server security.

Database

Mastering Database Auditing on PostgreSQL with pgaudit: Tracking Every Change and Securing Your System

By admin April 19, 2026

Stop losing data without knowing why. A detailed guide on installing and optimizing pgaudit on PostgreSQL to monitor every action and strengthen production system security.

Python

Cleaning Up Python Security: Hands-on Bandit and Safety in DevSecOps

By admin April 19, 2026

Don't let your Python projects become targets for hackers. Hands-on guide to using Bandit and Safety for automated security vulnerability scanning in DevSecOps.

Security

Self-hosting Vaultwarden with Docker: Lightweight and Secure ‘Personal’ Password Management

By admin April 19, 2026

Don't let passwords be your biggest weakness. This article guides you through deploying Vaultwarden with Docker to take full control of your data at near-zero cost.

Git

Git Filter-Repo: Permanently Remove Sensitive Data and Large Files from Repository History

By admin April 18, 2026

git-filter-repo is the officially recommended Git tool for permanently removing sensitive files, API keys, passwords, and large files from your entire repository history. This guide covers everything from installation and file removal to secret replacement, force pushing, and preventing future incidents.

Security

Implementing End-to-End TLS/SSL: Don’t Leave Data ‘Exposed’ in Your Internal Network

By admin April 17, 2026

Don't let traffic between your Web Server and Database run 'exposed'. A detailed guide on implementing End-to-End TLS/SSL for comprehensive data protection within your internal network.

Docker

Docker Secrets: Don’t Expose Passwords via a Clumsy ‘inspect’ Command

By admin April 17, 2026

Learn how to use Docker Secrets to protect passwords and API keys instead of exposing them via environment variables. A practical guide for Swarm and Compose v2.