Security works best when it is built into the pipeline, not bolted on at the end. The posts in this collection are about doing exactly that — turning CI/CD into a place where vulnerabilities, misconfigurations and leaked secrets get caught automatically, before they ever reach production. This is the approach I use to ship quickly without trading away safety.

You will find hands-on guides on scanning infrastructure as code, catching container vulnerabilities with Docker Scout, connecting GitLab to AWS with OIDC instead of long-lived keys, and wiring automated security gates into your delivery flow. The theme throughout is automation: make the secure path the default path, so good security does not depend on anyone remembering to do it.

Articles in this topic