Claude Code Security: The Smart Way to Integrate AI
Add Claude Code Security to CI/CD as a second net, while keeping deterministic rules as the baseline.
devsecops
A collection of 7 posts
Build a DevSecOps Pipeline on AWS: A Hands-On Guide
Build a security-gated CI/CD pipeline on AWS with secrets detection, SAST, CVE scanning, SBOM, and OPA on EKS and Far...
Integrating GitLab and AWS with OIDC (No Static Keys)
Connect GitLab CI/CD to AWS with OIDC so pipelines can assume IAM roles without static credentials.
Identifying Risks: Docker Scout's Vulnerability Scan on GitLab
Scan container images with Docker Scout in GitLab CI/CD and surface CVEs early.
Automating Code Reviews with GitLab CI/CD and Ollama
Automate Python code reviews with GitLab CI/CD and Ollama AI, improving code quality, catching issues, and enforcing ...
Automated Security Scanning for Infrastructure as Code with GitLab
Scan Terraform with tfsec in GitLab CI/CD and fail the pipeline on infrastructure risks.
Automating Security Scanning and Uploading Results to DefectDojo in GitLab CI/CD
Run GitLeaks, Semgrep, and NJSScan in GitLab CI and upload findings to DefectDojo.