14 - Case Study - Implementazione End-to-End di DevSecOps Pipeline
Real startup: SAST + DAST + SCA + container scanning + secrets management + policy as code integrati in CI/CD. Timeline: 8 settimane, team di 2. Metri
Mar 20, 20261 min read
Command Palette
Search for a command to run...
#devsecops
Articles tagged with #devsecops
13 - EU Normative e Data Protection - GDPR in Practice for Developers
GDPR per developer (data minimization, encryption, retention, DPA, DPIA), NIS2 directive, privacy by design, technical implementation.
Mar 20, 20261 min read12 - Compliance Framework - GDPR, SOC2, ISO27001 Mapping e Automazione
Compliance requirements (GDPR, SOC2, PCI-DSS, HIPAA, ISO27001), mapping a technical controls, audit logging, evidence collection, automation tools (Cl
Mar 20, 20261 min read11 - Runtime Security - Monitoraggio e Rilevamento di Anomalie
Falco (runtime threat detection), eBPF, behavioral analysis, incident response automation, forensics, integration con SIEM (Splunk, ELK).
Mar 20, 20261 min read10 - Infrastructure as Code Scanning - IaC Security e Terraform Policy
Terraform scanning (Checkov, tfsec), CloudFormation/ARM security, misconfig detection, policy enforcement, secrets in IaC, best practices.
Mar 20, 20261 min read109 - CI/CD Security Pipeline - Securing the Build and Deploy Process
GitHub Actions/GitLab CI security, branch protection, code review enforcement, SBOM generation in CI, artifact signing, deployment approval workflows,
Mar 20, 20261 min read