Category
devsecops
4 posts in this category.
devsecops· 10 min read
Kyverno: getting started with standard policies
Policy as Kubernetes resources: the four rule types, a starter set worth running in any cluster, and how to roll enforcement out without blocking every team on day one.
devsecops· 8 min read
Checkov: getting started with standard policies
Static analysis for infrastructure as code: wiring it into CI without drowning in findings, plus baselines, suppressions, and custom policies that catch what the defaults miss.
devsecops· 8 min read
Trivy: getting started with standard policies
One scanner for images, filesystems, IaC, secrets and live clusters. How to configure it so the results are actionable instead of a wall of unfixable CVEs.
devsecops· 11 min read
Static analysis for DevSecOps: what to cover and what to use
Six distinct classes of static analysis, the open-source tool for each, and where in the pipeline to run it so the results get acted on rather than ignored.