Topic

application-security

Everything filed under application-security, across every section.

2 articles

security
GitHub Secret Scanning Triage: Block Real Leaks Without Making Push Protection Noisy
A practical process for deciding which GitHub secret-scanning patterns should block pushes, which need tuning, and which should be excluded. Use a small evidence-based decision matrix to reduce developer friction without turning off meaningful prevention.
Aug 12, 20269 min read
security
How to Choose CI/CD Security Tools With a Requirements Matrix
Stop comparing CI/CD security products as interchangeable suites. Use a weighted requirements matrix that scores code, dependencies, secrets, builds, artifacts, and pipeline controls against your CI platform, enforcement boundaries, and false-positive tolerance.
Aug 7, 202612 min read