Curated security research, vulnerabilities, advisories and tools for practitioners.

#cicd

Security coverage tagged cicd.

1.

Turn multi-step software delivery into agentic flows you can trust

blog | 2026-07-16 00:00 | about.gitlab.com | original ↗ | #ai-security | #agentic-ai | #gitlab

2.

The Governance Gap Between Your Policy and Your Pipeline

blog | 2026-05-20 20:02 | jfrog.com | original ↗ | #ai-security | #supply-chain | #jfrog

3.

How to build CI/CD observability at scale

blog | 2026-04-28 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #metrics

4.

5 ways GitLab pipeline logic solves real engineering problems

blog | 2026-04-09 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #devops

5.

When JavaScript Chunks Become Keyholes to the Cloud

blog | 2026-03-11 09:10 | labs.cognisys.group | original ↗ | #cloud | #cloud-security | #pentesting

6.

DAST without disruption: Burp Suite DAST winter update 2025

blog | 2025-12-11 13:09 | portswigger.net | original ↗ | #appsec | #burp-suite | #portswigger

7.

Watch the webinar: Scale secure coverage without scaling headcount

blog | 2025-09-04 14:21 | portswigger.net | original ↗ | #api-security | #webinar | #portswigger

8.

Watch the on-demand webinar: Shift left without the strain

blog | 2025-07-14 13:00 | portswigger.net | original ↗ | #webinar | #false-positives | #dast

9.

DAST Tools: Features, Capabilities & How to Evaluate Them

blog | 2025-07-08 00:00 | aikido.dev | original ↗ | #attack-surface | #web-security | #ci-cd

10.

SAST Tools: Core Features & How to Choose the Best SAST Solution

blog | 2025-06-25 00:00 | aikido.dev | original ↗ | #appsec | #ci-cd | #sast

11.

Continuous Pentesting in CI/CD

blog | 2025-04-08 00:00 | aikido.dev | original ↗ | #ai-security | #pentesting | #appsec

12.

Get the TL;DR: tj-actions/changed-files Supply Chain Attack

incident | 2025-03-16 00:00 | CVE-2025-30066 | aikido.dev | original ↗ | #supply-chain | #incident-response | #github-actions

13.

Kingfisher transforming the developer experience with GitLab

blog | 2024-11-12 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #automation

14.

How Indeed transformed its CI platform with GitLab

blog | 2024-08-27 00:00 | about.gitlab.com | original ↗ | #gitlab | #kubernetes | #case-study

15.

Catch them early: Integrate Automated Pentesting in your CI/CD Pipeline

blog | 2024-05-16 00:00 | ethiack.com | original ↗ | #ai-security | #gitlab | #devsecops

16.

Ethiack 2.14: Test Internal Assets, CI/CD, SSO, New Reports, and more!

blog | 2024-05-07 00:00 | ethiack.com | original ↗ | #product-update | #nis2 | #cicd

17.

Evaluating and Choosing Between Monorepo vs. Polyrepo Approaches for Code Management

blog | 2024-03-08 01:58 | hackerone.com | original ↗ | #ci-cd | #cicd | #software-engineering

18.

Preventing fallout from your CI/CD platform being hacked

blog | 2023-06-19 00:00 | aikido.dev | original ↗ | #cloud | #supply-chain | #cloud-security

19.

JFrog & Harness – Don’t Get Bogged Down with Continuous Delivery

blog | 2018-11-01 11:18 | jfrog.com | original ↗ | #devops | #jfrog | #deployment

20.

Accelerate Azure DevOps or TFS with JFrog Artifactory and Conan

blog | 2018-10-29 09:19 | jfrog.com | original ↗ | #cloud | #package-management | #tutorial

21.

[Guest Blog] InfoSec’s New Mandate: Silo Smashing and Feedback Loop Amplification

blog | 2016-03-24 00:00 | bugcrowd.com | original ↗ | #devsecops | #security-culture | #cicd