↓Skip to main content

AppSec

Application security is about building security into how software is designed, packaged, and shipped, not treating it as a final gate.

This section collects practical notes on supply chain visibility, pipeline controls, and the checks that help teams catch risk earlier.

Start here: CI/CD Security Pipeline.

file CI/CD Security Pipeline

/appsec/ci-cd-security-pipeline

A practical overview of the security checks that fit into a modern CI/CD pipeline, including SBOM generation, dependency scanning, secrets detection, image scanning, signing, and release controls.