Vladimir Gusarov·Sep 29All packages up to date, still vulnerable: fixing transitive NuGet CVEs in .NETSecurity scans flag a NuGet package you never added, and updating won't clear it. Here's how to find the cause and pin it once.
InJavarevisitedbyChaskarshailesh·Aug 28One Pipeline, Three Roles: Operationalizing GHAS Secret ScanningPart 2 of 3 — Making dev, SecOps, and the build pipeline work as a single DevSecOps unit
InJavarevisitedbyChaskarshailesh·Aug 25From Detection to Remediation: GHAS Secret Scanning for DevSecOpsPart 1 of 3 — How secrets leak, how GHAS finds them, and the six-step fix prompt
InJavarevisitedbyChaskarshailesh·Aug 25Cleaning Up GitHub Commit History: A DevSecOps Engineer’s GuidePart 3 of 3 — Rewriting history safely, and what rewriting history can’t fix
InstaSLA·Aug 20GitHub Advanced Security ROI: Why Scanning Without SLAs Is a Waste of MoneyBack to blogThe Illusion of Security: Identification vs. RemediationWhy Scanning Fails in a Vacuum: The Alert Fatigue EpidemicThe Missing…
WaforEva·Sep 13, 2025Custom Queries: How to Build and Run Custom CodeQL Queries with Github advanced security (GHAS)IM BACK ! this time with a technical article since i’ve recently learned about CodeQl custom queries. So the goal of this article is to…
WaforEva·Jun 29, 2025GitHub Advanced Security Certification Preparation Part 8Now lets dive into Dependabot Security Updates and Version Updates! We’ll walk through everything you need to know, and there’s a quiz at…
WaforEva·Jun 29, 2025GitHub Advanced Security Certification Preparation Part 7Enough with the CodeQL madness !! it took forever and guess what? I’m still not even done with it... “The certification isn’t just about…
Rashard A.·May 25, 2025My Race Against the Clock: Securing My Cloud Development Future From First GitHub Commit to a FREE…Hello fellow open-source advocates, security champions, and lifelong learners!
WaforEva·Apr 8, 2025GitHub Advanced Security Certification Preparation Part 6Sometimes I ask myself, why am I even writing these articles? Will they actually help someone study for the certification one day? Or am I…
