--- title: "#devsecops articles | Hashnode" description: "It's a newer security role that emulates DevOps as security embedded in development teams that is focused on developer enablement." url: "https://hashnode.com/tag/devsecops" --- Tag # #devsecops 1,455 posts · 296 followers [Xccelera AI](https://hashnode.com/@xccelera) · [1d ago](https://hashnode.com/posts/batch-fixing-cves-across-repos-with-ai-agents/6af2edbf82596ba802d42d6b) ### [Batch-Fixing CVEs Across Repos With AI Agents](https://xccelera.hashnode.dev/batch-fixing-cves-across-repos-with-ai-agents?utm_source=hashnode&utm_medium=feed) Learn how AI agents batch fix CVEs across repos: dedupe findings, upgrade packages, test every fix, and open reviewed pull requests with evidence. 6 min read · [xccelera.hashnode.dev](https://xccelera.hashnode.dev/batch-fixing-cves-across-repos-with-ai-agents?utm_source=hashnode&utm_medium=feed) [RONI DAS](https://hashnode.com/@ronidas) · [2d ago](https://hashnode.com/posts/how-one-click-put-passwords-on-github-coding-agents-allow-lists-and-leaked-secrets/6af1ed4115956fa8de00599b) ### [How one click put passwords on GitHub: coding agents, allow lists and leaked secrets](https://systemdesignacademy.hashnode.dev/how-one-click-put-passwords-on-github-coding-agents-allow-lists-and-leaked-secrets?utm_source=hashnode&utm_medium=feed) Apiiro found a real secret in 1,122 public copies of one Claude Code settings file. Here is how a password gets from your terminal into a public repo, why deleting the file does not fix it, and what to do instead. 7 min read · [systemdesignacademy.hashnode.dev](https://systemdesignacademy.hashnode.dev/how-one-click-put-passwords-on-github-coding-agents-allow-lists-and-leaked-secrets?utm_source=hashnode&utm_medium=feed) [Jenna's Runbooks](https://hashnode.com/@jennasrunbooks) · [3d ago](https://hashnode.com/posts/defending-an-mcp-server-against-prompt-injection-through-cloudtrail/6aefce9e8620ee70ad53ee89) ### [Defending an MCP server against prompt injection through CloudTrail](https://blog.jennasrunbooks.com/defending-an-mcp-server-against-prompt-injection-through-cloudtrail?utm_source=hashnode&utm_medium=feed) Microsoft's spotlighting defense in its simplest form, and the layers that make it enough 5 min read · [blog.jennasrunbooks.com](https://blog.jennasrunbooks.com/defending-an-mcp-server-against-prompt-injection-through-cloudtrail?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/defending-an-mcp-server-against-prompt-injection-through-cloudtrail/6aefce9e8620ee70ad53ee89) [prakash888kp](https://hashnode.com/@prakash888kp) · [3d ago](https://hashnode.com/posts/the-rag-change-that-looked-fine-until-production-users-caught-it/6af08cfc5ee6983369f4e449) ### [The RAG Change That Looked Fine — Until Production Users Caught It](https://arcwinglabs.hashnode.dev/the-rag-change-that-looked-fine-until-production-users-caught-it?utm_source=hashnode&utm_medium=feed) Why green CI and a polished notebook still shipped a broken retrieval system — and how SentinelRAG turns retrieval, grounding, and ingest trust into merge-blocking CI gates 14 min read · [arcwinglabs.hashnode.dev](https://arcwinglabs.hashnode.dev/the-rag-change-that-looked-fine-until-production-users-caught-it?utm_source=hashnode&utm_medium=feed) [3](https://hashnode.com/posts/the-rag-change-that-looked-fine-until-production-users-caught-it/6af08cfc5ee6983369f4e449) [Ginny Ibe](https://hashnode.com/@ginnyibe) · [4d ago](https://hashnode.com/posts/my-kubernetes-cluster-disappeared-rebuilding-it-changed-how-i-troubleshoot/6aef1de28d6aa32adb2d53b1) ### [My Kubernetes Cluster Disappeared. Rebuilding It Changed How I Troubleshoot.](https://ginnyibe.hashnode.dev/my-kubernetes-cluster-disappeared-rebuilding-it-changed-how-i-troubleshoot?utm_source=hashnode&utm_medium=feed) Lessons from Kubernetes Week 12: rebuilding AWS EKS, troubleshooting node groups developing an evidence-based AI incident-response workflow. 3 min read · [ginnyibe.hashnode.dev](https://ginnyibe.hashnode.dev/my-kubernetes-cluster-disappeared-rebuilding-it-changed-how-i-troubleshoot?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/my-kubernetes-cluster-disappeared-rebuilding-it-changed-how-i-troubleshoot/6aef1de28d6aa32adb2d53b1) [Umer Amin Durrani](https://hashnode.com/@umeramindurrani) · [4d ago](https://hashnode.com/posts/ai-agents-in-devops-a-safer-path-from-pull-request-to-production/6aeef3fbeab3237eaeda591a) ### [AI Agents in DevOps: A Safer Path from Pull Request to Production](https://umeramindurrani.hashnode.dev/ai-agents-in-devops-a-safer-path-from-pull-request-to-production?utm_source=hashnode&utm_medium=feed) A practical guide to AI agents in DevOps: least privilege, human review, CI/CD checks, audit trails and tested rollback before production changes. 4 min read · [umeramindurrani.hashnode.dev](https://umeramindurrani.hashnode.dev/ai-agents-in-devops-a-safer-path-from-pull-request-to-production?utm_source=hashnode&utm_medium=feed) [Marius-Florin Cristian](https://hashnode.com/@keibidrop) · [6d ago](https://hashnode.com/posts/threat-modelling-a-data-flow-with-stride/6aec3a9c412b5eb5b87935c1) ### [Threat modelling a data flow with STRIDE](https://keibidrop.hashnode.dev/threat-modelling-a-data-flow-with-stride?utm_source=hashnode&utm_medium=feed) Draw the data flow in OWASP Threat Dragon, then go through each element and flow with STRIDE: the boundary, the data, each threat and its control. 1 min read · [keibidrop.hashnode.dev](https://keibidrop.hashnode.dev/threat-modelling-a-data-flow-with-stride?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/threat-modelling-a-data-flow-with-stride/6aec3a9c412b5eb5b87935c1) [AI CodeOps](https://hashnode.com/@aicodeops) · [Nov 4](https://hashnode.com/posts/our-ai-s-security-audit-flagged-a-bug-we-never-asked-it-to-fix/6aeb8bdc2dbcda2cb1094b33) ### [Our AI's Security Audit Flagged a Bug We Never Asked It to Fix](https://aicodeops.hashnode.dev/our-ai-s-security-audit-flagged-a-bug-we-never-asked-it-to-fix?utm_source=hashnode&utm_medium=feed) We gave a set of AI agents a small, realistic task on a demo shopping cart: discount codes now come from user input, so validate them. Trim whitespace, uppercase, letters and digits only, 20 character 2 min read · [aicodeops.hashnode.dev](https://aicodeops.hashnode.dev/our-ai-s-security-audit-flagged-a-bug-we-never-asked-it-to-fix?utm_source=hashnode&utm_medium=feed) [Amaresh Pelleti](https://hashnode.com/@amareswer) · [Nov 4](https://hashnode.com/posts/github-actions-lockfile-guide-how-actions-lock-works/6aeb74d29e66e64bd2df5004) ### [GitHub Actions Lockfile Guide: How actions.lock Works](https://devtoolhub.hashnode.dev/github-actions-lockfile-guide-how-actions-lock-works?utm_source=hashnode&utm_medium=feed) Originally published on DevToolHub. GitHub Actions workflow lockfiles went into public preview on October 14, 2026 and became generally available on October 28. The timing is almost funny: GitHub aut 13 min read · [devtoolhub.hashnode.dev](https://devtoolhub.hashnode.dev/github-actions-lockfile-guide-how-actions-lock-works?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Nov 4](https://hashnode.com/posts/the-attacker-didn-t-break-into-production-it-walked-in-through-development/6aead83c3ed9f2c028e09a58) ### [The Attacker Didn't Break Into Production. It Walked In Through Development](https://nulltrace.hashnode.dev/the-attacker-didn-t-break-into-production-it-walked-in-through-development?utm_source=hashnode&utm_medium=feed) Chainstack's breach started in a dev environment, reached production five days later, and stayed quiet — until the company said the honest thing about its customers' keys. 4 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/the-attacker-didn-t-break-into-production-it-walked-in-through-development?utm_source=hashnode&utm_medium=feed)