Tag: Trivy
AI Can Generate Your Infrastructure. Can Your CI/CD Pipeline Trust It?
Oreoluwa Omoike | | AI code vulnerabilities, AI coding assistants, AI-generated code, AI-generated infrastructure, Checkov, CI/CD security, Conftest, devsecops, IaC security, infrastructure as code, infrastructure security, Kubernetes security, OPA, platform engineering, policy as code, provenance tracking, secret scanning, secure CI/CD, Terraform security, tfsec, Trivy, TruffleHogAI-generated infrastructure code is exposing a growing security gap, pushing platform teams to add stronger automated gates, provenance tracking and human review before Terraform, Kubernetes and CI/CD changes reach production ...
Shift Left Security: 4 Automated Security Gates in GitHub Actions
Zia Ullah | | automated security testing, CI/CD security gates, CodeQL, container image scanning, CVE detection, DAST, dependency scanning, DevSecOps pipeline, Dynamic Application Security Testing, GitHub Actions security, Node.js security, npm audit, OWASP ZAP, SAST, shift left security, Snyk, Software Supply Chain Security, Static Application Security Testing, Trivy, vulnerability scanningLearn how to add four automated security gates to GitHub Actions using npm audit, Snyk, Trivy, CodeQL and OWASP ZAP—without an enterprise licence ...
