SsoftverseAdmin17h ago · 22 min readDevSecOps Checklist 2026: Secure Your CI/CD Pipeline Without Slowing DeliveryTL;DR A secure pipeline does more than run a vulnerability scanner. Protect the repository and identities first; keep secrets out of code and give workloads short-lived credentials; scan code, dependedevopsenginer.hashnode.dev
KKarthikeyan Selvaraj1d ago · 8 min readHow to Troubleshoot Jenkins Pipeline Failures Using RAG and AI#DevOps #Jenkins #Artificial Intelligence #RAG #AIOps Have you ever spent 30 minutes or even a few hours troubleshooting a Jenkins pipeline failure, only to discover that your team had already fixed t1Acloudbites.hashnode.dev
QQuellix Labs1d ago · 11 min readStop Untrusted Repo Files From Steering Coding AgentsA coding agent can inherit instructions from a file that your team did not write, review, or even notice. If it also has permission to edit configuration, install packages, or reach the internet, a roquellixlabs.hashnode.dev
GGeorge Ezejiofor1d ago · 24 min readGRC Open-Source Tools: Falco, Wazuh & Probo (CrowdStrike/Vanta Alternative, Zero SaaS Bills)Part of the homelab build series. Governance, risk and compliance on open source only: Kyverno blocks, Falco detects live threats, Wazuh correlates and maps them to MITRE ATT&CK and SOC 2, and Probo hgeorgeezejiofor.com
KKarthicksubramanian MK3d ago · 4 min readWe built SecFoo so your AI coding agent can do a proper security reviewMost teams already have an AI coding agent on their machines: Claude Code, GitHub Copilot CLI, Codex, Cursor or Gemini. These agents can read a whole codebase, follow data from an HTTP request down tokarthicksubramanian.hashnode.dev
BBalachander T J6d ago · 3 min readPHP2Shell: Are DevOps and DevSecOps Ready for the AI-Driven Security Era?The recent PHP2Shell vulnerability disclosure caught my attention, not just because of its severity, but because of what it signals for the future of cybersecurity. On October 21, 2026, two critical Pbalachandertj.hashnode.dev
OOzéias Sant'anaOct 23 · 18 min readA Security Checklist for Anyone Using AI Coding AgentsIf you use Claude Code, Codex, OpenCode, or another coding agent, this is a good week to check both your development stack and the permissions you give your agent. Several serious vulnerabilities landallcoda.hashnode.dev
PPrem ChoudharyOct 23 · 9 min readTerraform & Our InfrastructureDay 0 — Terraform & Our Infrastructure, Explained Simply Series: Zero to Production on AWS EKS with Terraform — Part 1 · Day 0 The "before we touch any code" episode. Welcome to Day 0. 👋 Before we 1prem14choudhary.hashnode.dev
CCyber KnightOct 22 · 4 min readA CVSS 10.0 Bug Sat Inside GitLab for 12 Years. It Lived in the Regex Engine.Twelve years ago, somebody compiled a regular expression. Not in a browser. In a server-side library called Onigmo — the Ruby regex engine GitLab bundles — quietly turning patterns into executable mat1Dnulltrace.hashnode.dev
SSulakshana KarunarathneOct 22 · 6 min readRunning a Database as a Kubernetes Deployment? Watch Out for This Rolling-Update TrapThe Tempting Shortcut: "Everything is a Deployment" When you first move an app to Kubernetes, it's tempting to run every workload the same way: apiVersion: apps/v1 kind: Deployment # ⚠️ Works, but hasdevseccloud.hashnode.dev
