DevSecOps Archives

Why Kubernetes Admission Control Is Really a Security UX Problem

Most Kubernetes admission webhooks treat security as binary: accept the configuration, or reject it. That binary thinking has matured an entire category of policy engines (OPA Gatekeeper, Kyverno, ValidatingAdmissionPolicy with CEL) that ...

Ketankumar Jani | June 12, 2026 | Admission Control, DevSecOps, kubernetes, Kubernetes security, Policy Engines

How to Implement Shift-Left Security in Cloud-Native Applications?

Most security teams still treat cloud-native security as something to handle after deployment. That approach is costing them more than they realize. According to research, the average cost of a data breach ...

James Miller | May 18, 2026 | CI/CD pipelines, cloud native security, DevSecOps, Kubernetes security, shift left security

CI/CD, GitOps, pipelines, Jenkins, kubernetes, kpack, buildpacks, CI/CD, Codefresh, Komodor, AI, clusters, kubernetes, generative AI Kubernetes Argo container security continuous SQL Server Windocks Tekton Kubeflow Red Hat CI/CD

Where DevOps Pipelines Break: Real Attack Paths in Cloud-Native CI/CD

While traditional security focuses on perimeters, modern attackers are moving upstream to the CI/CD pipeline. By compromising the build process rather than the final product, they can inject malicious code into trusted ...

Alex Vakulov | May 11, 2026 | Artifact Integrity, Build Server Vulnerabilities, CI/CD security, Dependency Poisoning, DevSecOps, Kubernetes security, Pipeline Hardening, Secret Management, SolarWinds Incident, Supply Chain Attacks

state, stateless, kubernetes, scanning, cloudsmith, stateless ephemeral stateful security Kubernetes unikernel Sumo Logic

Java Code Isn’t the Problem – The Container Is

Learn how integrating Docker Scout into Java CI pipelines shifts container security left, replacing manual reviews with automated gates to secure base images and dependencies ...

Swapneswar Sundar Ray | May 11, 2026 | base image vulnerabilities, CI/CD pipeline, container security, DevSecOps, Docker Scout, GitHub Actions, Java security, jenkins, Maven dependencies, shift left security

OWASP Has Adopted DockSec and the Cloud Security Community Is Taking Notice

With more than 13,000 downloads across more than 40 countries, DockSec has earned its place as an OWASP Incubator Project by doing something most container security tools have not managed: closing the ...

Puspita Pradhan | April 30, 2026 | CI/CD, container security, DevSecOps, kubernetes, open source

CleanStart Takes Aim at BusyBox to Harden Container Security

Container security faces a significant "inheritance risk" through BusyBox, a legacy utility package embedded in popular base images. CleanStart addresses this with a new BusyBox-free container architecture, replacing inherited userspace utilities with ...