|
Hacking Hacker News: Lessons Learned from a Security Researcher Wearing A Growth Hat
|
Nir Valtman |
2022-01-02 |
Active |
886 |
2
|
|
Afraid of your source code leaking? I can tell by the Twitch in your eye…!
|
Nir Valtman |
2022-01-10 |
Active |
441 |
--
|
|
How Top Open Source Projects Protect Their Code: Insights and Best Practices
|
Chris Abraham |
2022-02-07 |
Active |
1,237 |
2
|
|
Application Security vs. Software Supply Chain Security: What's the Difference?
|
Mike Doyle |
2022-02-27 |
Active |
1,688 |
3
|
|
How to Survive a State Actor's Attempt to Put a Backdoor in Your Code
|
Mark Maney |
2022-03-07 |
Active |
598 |
20
|
|
Github OAuth Apps Security: How to protect yourself against GitHub/OAuth Apps Supply Chain Attacks
|
Nir Valtman |
2022-04-11 |
Active |
460 |
9
|
|
The Importance of Free Secret Detection, Even for Private Repositories
|
Nir Valtman |
2022-05-11 |
Active |
295 |
3
|
|
Tracing the Impact of a Clothing Retailer's Software Supply Chain Breach on Your Production Environment
|
Mike Doyle |
2022-05-25 |
Active |
467 |
5
|
|
GitGoat: An Open Source Project of Intentionally (Riskless) Misconfigured GitHub Organizations
|
Nir Valtman |
2022-06-27 |
Active |
307 |
1
|
|
Hacking Upstream: Finding a 0-Day in an OpenSSH Key Parser Library
|
Mike Doyle |
2022-07-06 |
Active |
2,826 |
2
|
|
Protecting Stale Code Repositories on GitHub: Essential Security Measures
|
Eran Medan |
2022-07-18 |
Active |
1,014 |
5
|
|
GitHub CODEOWNERS: What Every Developer Should Know
|
Nir Valtman |
2022-07-23 |
Active |
1,488 |
3
|
|
Demystifying the Pl0x GitHub attack
|
Mike Doyle |
2022-08-17 |
Active |
1,325 |
1
|
|
Analyzing LastPass' Recent Security Incident Notification
|
Mike Doyle |
2022-08-26 |
Active |
785 |
1
|
|
Four takeaways from the NSA's software supply chain security recommendations
|
Mike Doyle |
2022-09-10 |
Active |
963 |
2
|
|
Hardening Your Software Development Environment: A Beginner's Guide
|
Eran Medan |
2022-09-21 |
Active |
1,464 |
3
|
|
Trouble Keeping Track of Your Keys? So Does Toyota: Lessons Learned from a Key Management Breach
|
Nir Valtman |
2022-10-12 |
Active |
355 |
2
|
|
What to Consider Before Enforcing Multi-Factor Authentication (MFA) on GitHub
|
Nir Valtman |
2022-10-19 |
Active |
1,324 |
--
|
|
GitHub Hosted vs. Self-Hosted Runners: Which One Should You Choose?
|
Eran Medan |
2022-11-08 |
Active |
1,426 |
1
|
|
What is Pipelineless Security?
|
Nir Valtman |
2022-12-05 |
Active |
922 |
1
|
|
Leveraging Developer Security Skills to Fortify your Security Team
|
Eran Medan |
2022-12-14 |
Active |
498 |
--
|
|
Security to-do lists slow you down, security tools need to fix the problems they find
|
Mark Maney |
2022-12-19 |
Active |
644 |
--
|
|
Azure Permissions: Managing Granular Permissions in Azure Devops
|
Eran Medan |
2023-01-10 |
Active |
1,645 |
--
|
|
Best practices maintaining a secure development environment
|
Mark Maney |
2023-01-11 |
Active |
1,961 |
--
|
|
Harnessing the Power of Secure Coding Practices for Effective CI/CD Security
|
Nir Valtman |
2023-02-13 |
Active |
1,796 |
--
|
|
What is an SBOM, what is it not, and do you need one?
|
Mark Maney |
2023-03-22 |
Active |
1,649 |
--
|
|
The Importance of EPSS in Vulnerability Prioritization: A Holistic Approach
|
Eran Medan |
2023-03-28 |
Active |
628 |
1
|
|
Defending Against Source Code Exfiltration, Fast and Slow
|
Mike Doyle |
2023-04-05 |
Active |
1,272 |
--
|
|
Adopting Pipelineless Security Solutions for Modern AppSec Programs
|
Simon Wenet |
2023-04-10 |
Active |
1,465 |
--
|
|
How We Converted a GitHub Tool Into a General Purpose Webhook Proxy to Supercharge Our Integration Development
|
Doron Guttman |
2023-04-17 |
Active |
1,949 |
1
|
|
How insurance tech companies are leading the way on Application Security
|
Simon Wenet |
2023-05-03 |
Active |
970 |
--
|
|
Trying to identify spoofing in GitHub? May the 4th be with you!
|
Mark Maney |
2023-05-03 |
Active |
1,976 |
1
|
|
Why secrets continue to be a massive problem in source code
|
Mark Maney |
2023-05-30 |
Active |
1,441 |
--
|
|
What Developers Can Learn from Taylor Swift's Re-recording Strategy
|
Nicholas Rodine |
2023-06-12 |
Active |
1,107 |
2
|
|
The Criticality of Context for Addressing Software Supply Chain Risk
|
Mark Maney |
2023-06-19 |
Active |
1,753 |
--
|
|
Should I Manage Code in a Single Organization or Multiple Organizations?
|
Mark Maney |
2023-06-27 |
Active |
1,101 |
--
|
|
How to Detect & Prevent Source Code Exfiltration
|
Simon Wenet |
2023-07-05 |
Active |
1,414 |
--
|
|
Why Secret Scanning Visibility Should Be Free & Understanding Where There is Value
|
Mike Doyle |
2023-07-11 |
Active |
1,420 |
--
|
|
How to prioritize your backlog of hardcoded secrets
|
Nir Valtman |
2023-07-18 |
Active |
1,884 |
--
|
|
How to ensure your third-party software packages are reputable
|
Mark Maney |
2023-08-16 |
Active |
1,909 |
--
|
|
How to ensure you don’t have Sourcegraph secrets in source code
|
Nir Valtman |
2023-09-04 |
Active |
630 |
3
|
|
SBOM For Your Software Supply Chain: Added Visibility or Security Risk?
|
Mark Maney |
2023-09-19 |
Active |
1,176 |
--
|
|
How to Determine the Severity of a Third-Party Risk with Software Composition Analysis (SCA)
|
Simon Wenet |
2023-09-27 |
Active |
1,501 |
--
|
|
A Complete Guide: Enterprise Managed Users vs Bring Your Own Users on GitHub
|
Nir Valtman |
2023-10-17 |
Active |
1,301 |
--
|
|
How to Evaluate a Static Application Security Testing (SAST) Solution
|
Mark Maney |
2023-11-13 |
Active |
1,668 |
--
|
|
Why Risk Scanning Needs to be Free: Don't Just Find Risks, Fix Them
|
Simon Wenet |
2023-11-20 |
Active |
1,283 |
--
|
|
CI/CD Pipeline Security vs. IDE plugins vs. Pipelineless Security
|
Nir Valtman |
2023-11-27 |
Active |
1,881 |
--
|
|
How to prioritize third-party package (SCA) vulnerabilities
|
Mark Maney |
2023-11-28 |
Active |
1,410 |
--
|
|
Minimize AppSec Effort and Maximize AppSec Coverage with Pipelineless Security Scanning
|
Nir Valtman |
2024-01-23 |
Active |
1,972 |
--
|
|
The Essential Guide to SCA and SAST
|
Simon Wenet |
2024-02-08 |
Active |
505 |
--
|
