6 min readDevelopmentFeatured
The Role of Identity in DevSecOps: Integrating Security into the Pipeline
Learn how integrating identity management into your DevSecOps workflow strengthens pipeline security and enables reliable code signing practices.
All tags
Tag
Devsecops
Read 11 articles on Devsecops by Ashish Srivastava — practical guides covering implementation patterns, security, and production lessons.
11 posts
6 min readtechnicalFeatured
SBOMs and Identity: From Inventory to Trust
Learn how SBOMs and artifact signing enhance supply chain security through SLSA frameworks and software composition analysis.
Part 11 · Machine Identity & DevSecOps Series
6 min readtechnicalFeatured
Kubernetes RBAC and Service Account Security
Secure your K8s cluster with advanced RBAC configurations and service account hardening techniques. Learn how Kyverno and pod security enforce strict access controls.
Part 10 · Machine Identity & DevSecOps Series
6 min readSecurityFeatured
Machine Identity Management: The Hidden Attack Surface
Explore how machine identity management addresses the overlooked risks in service account security, certificate management, and API key management within modern infrastructure.
Part 3 · Machine Identity & DevSecOps Series
6 min readBackendFeatured
Spring Security and GraphQL: Securing GraphQL APIs
Explore essential strategies for securing GraphQL endpoints with Spring Security, including effective authorization patterns and rate limiting techniques.
Part 2 · Machine Identity & DevSecOps Series
6 min readBackendFeatured
GitOps Security: Protecting Kubernetes Secrets and Configuration
Learn how to secure your GitOps pipelines and protect sensitive Kubernetes configuration data with tools like Sealed Secrets, SOPS, ArgoCD, and Flux.
Part 4 · Machine Identity & DevSecOps Series
6 min readDevelopmentFeatured
SPIFFE and SPIRE: Universal Identity for Services
Learn how SPIFFE and SPIRE provide universal identity for services, enhancing security across Kubernetes and multi-cluster deployments.
Part 5 · Machine Identity & DevSecOps Series
6 min readDevelopmentFeatured
Zero Trust for CI/CD: Securing the Software Delivery Pipeline
Implement zero trust strategies in your CI/CD pipeline to enhance supply chain security using ephemeral credentials and SLSA frameworks.
Part 6 · Machine Identity & DevSecOps Series
6 min readDevelopmentFeatured
Certificate Lifecycle Automation with cert-manager and Vault PKI
A technical walkthrough of automating certificate lifecycles with cert-manager and Vault PKI, covering TLS management, rotation strategies, and Let's Encrypt integration.
Part 7 · Machine Identity & DevSecOps Series
6 min readtechnicalFeatured
API Key Management Best Practices: Design, Distribution, and Rotation
Learn essential strategies for managing API keys, including secure design principles, distribution workflows, and automated rotation techniques.
Part 8 · Machine Identity & DevSecOps Series
8 min readBackendFeatured
SSH Key Management: Moving Beyond Password Authentication
This guide covers SSH key management, certificates, and CA strategies to replace password authentication with effective security practices.
Part 9 · Machine Identity & DevSecOps Series