SDSang Davidindevelopment-security-operations.hashnode.dev·Apr 23 · 3 min readSetup Static Application Security Scanning in GitLab CI using NJSScan & SemgrepOverview Static Application Security Testing (SAST) implementation using NJSScan and Semgrep to identify security vulnerabilities in source code before deployment. This provides automated code-level s00
SDSang Davidindevelopment-security-operations.hashnode.dev·Apr 23 · 3 min readSetup GitLab CI pipeline and pre-commit script to scan for secrets using GitLeaksProject Description Configure GitLeaks job in GitLab CI to check commits for secrets Create a Git pre-commit hook script that runs GitLeaks and performs GitLeaks scan before code is committed Creat00
SDSang Davidindevelopment-security-operations.hashnode.dev·Mar 11 · 7 min readYAML for DevOps Engineers: YAML OverviewYou've cloned a repo, opened a .yml file, and instantly felt lost. You're not alone — and by the end of this, you won't be What is YAML? Depending on whom you ask, YAML stands for "Yet Another Markup 10
SDSang Davidindevelopment-security-operations.hashnode.dev·Mar 6 · 8 min readHardening a LAMP Web Server on AWSThis project focused on architecting a secure LAMP (Linux, Apache, MySQL, PHP) environment on AWS by implementing a multi-layered Defense in Depth strategy. By hardening the cloud perimeter and the ho10
SDSang Davidindevelopment-security-operations.hashnode.dev·Mar 6 · 6 min readStep-by-Step: Deploy a Local Kubernetes Cluster with Minikube on UbuntuIntroduction Minikube is one of the many local setups for anyone interested in exploring Kubernetes locally. If you're curious about the basic functionality of Kubernetes, this article is the ideal re00