Curated security research, vulnerabilities, advisories and tools for practitioners.

#ci-cd

Security coverage tagged ci-cd.

1.

Savant Forge: Automated offensive testing to keep pace with AI-generated code

blog | 2026-09-24 11:45 | bugcrowd.com | original ↗ | #ai-security | #ci-cd | #offensive-security

2.

How to design GitLab for enterprise scale

blog | 2026-09-22 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #kubernetes

3.

How to calculate DevOps platform total cost of ownership

blog | 2026-09-11 00:00 | about.gitlab.com | original ↗ | #ai-security | #gitlab | #devops

4.

Security Testing Every Release Without a Manual Bottleneck

blog | 2026-09-09 14:37 | borghq.io | original ↗ | #appsec | #devsecops | #automation

5.

CVE-2026-63077: JetBrains TeamCity unauthenticated RCE with public PoC and active exploitation

vulnerability | Critical | Actively exploited | 2026-08-07 08:38 | CVE-2026-63077 | github.com | original ↗ | #active-exploitation | #rce | #public-poc

6.

Scale software delivery pipelines in isolation without owning the runner fleet

blog | 2026-08-25 00:00 | about.gitlab.com | original ↗ | #gitlab | #compliance | #devops

7.

From OpenTofu to Argo CD: GitLab as your AWS control plane

blog | 2026-08-18 00:00 | about.gitlab.com | original ↗ | #cloud | #aws | #gitlab

8.

Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR

blog | 2026-08-17 14:00 | wiz.io | original ↗ | #github-actions | #ci-cd | #vulnerability

9.

GitLab Secrets Manager adds ESO, Terraform, API support

blog | 2026-08-06 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #kubernetes

10.

What Is Continuous Pentesting? A Definition for Engineering Teams

blog | 2026-08-06 16:56 | borghq.io | original ↗ | #pentesting | #appsec | #continuous-testing

11.

Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks

research | 2026-07-21 00:00 | crowdstrike.com | original ↗ | #ai-security | #supply-chain | #featured

12.

Incremental Testing: Continuous Pentesting at the Speed of Development

blog | 2026-07-29 00:00 | tenzai.com | original ↗ | #ai-security | #pentesting | #appsec

13.

Modernize Java with Cursor and GitLab

blog | 2026-07-22 00:00 | about.gitlab.com | original ↗ | #ai-security | #gitlab | #devops

14.

How to Use JFrog CLI Without Editing Your CI Scripts

blog | 2026-07-22 13:16 | jfrog.com | original ↗ | #automation | #devops | #ci-cd

15.

300 WINtegrations Strong: An Open Security Ecosystem Built for the Speed of AI

blog | 2026-07-21 12:35 | wiz.io | original ↗ | #ai-security | #devsecops | #threat-intelligence

16.

The practical checklist for defending against supply chain attacks

blog | 2026-07-14 00:00 | aikido.dev | original ↗ | #supply-chain | #appsec | #incident-response

17.

Green DevOps: Why carbon measurement belongs in your CI/CD pipeline

blog | 2026-07-09 00:00 | about.gitlab.com | original ↗ | #gitlab | #kubernetes | #devops

18.

How ProdSec uses Wiz

blog | 2026-07-09 16:20 | wiz.io | original ↗ | #cloud | #devsecops | #threat-detection

19.

Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets

blog | 2026-06-24 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #secrets

20.

Software Supply Chain Security: Protecting the Path From Commit to Production

blog | 2026-06-23 07:00 | bugbunny.ai | original ↗ | #supply-chain | #devsecops | #ci-cd

21.

Cloud Native Security Solution: What to Demand Before You Buy

blog | 2026-06-19 07:00 | bugbunny.ai | original ↗ | #cloud | #kubernetes | #ci-cd

22.

AI Catalog updates for governance and operations

blog | 2026-06-18 00:00 | about.gitlab.com | original ↗ | #ai-security | #gitlab | #automation

23.

DevSecOps Automation Tools: What to Put in the Pipeline and What to Keep Out

blog | 2026-06-14 07:00 | bugbunny.ai | original ↗ | #supply-chain | #appsec | #devsecops

24.

DevSecOps Best Practices for Teams That Ship Every Week

blog | 2026-05-29 07:00 | bugbunny.ai | original ↗ | #cloud | #devsecops | #ci-cd

25.

Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure

blog | 2026-05-27 13:52 | wiz.io | original ↗ | #supply-chain | #cryptocurrency | #ci-cd

26.

Full security scanner coverage of your codebase in minutes

blog | 2026-05-26 00:00 | about.gitlab.com | original ↗ | #appsec | #gitlab | #devsecops

27.

Container Vulnerability Scanning: Finding the Issues That Actually Ship

blog | 2026-05-25 07:00 | bugbunny.ai | original ↗ | #cloud-security | #vulnerability-management | #kubernetes

28.

Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack

blog | 2026-05-12 00:00 | aikido.dev | original ↗ | #ai-security | #supply-chain | #malware

29.

The Jenkins Threat Landscape

blog | 2026-05-06 15:10 | wiz.io | original ↗ | #cloud | #cloud-security | #vulnerability-management

30.

Build an automated detection testing framework with GitLab CI/CD and Duo

blog | 2026-04-30 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #siem