5 Open Source Security Tools All Developers Should Know About
Discover five essential open-source security tools for CI/CD pipelines. Learn to integrate SAST, secrets detection, SCA, IaC security, and DAST with practical code examples and demos.
Incident Response for Developers
Learn essential incident response strategies for developers, focusing on security incidents, your role during crises, and effective communication with AppSec teams.
Writing a Language Server in OCaml for Emacs - Fun and Profit
Explore writing a language server in OCaml for Emacs, covering LSP basics, implementation tips, and integration with Emacs for enhanced coding experience and security analysis.
Detecting Malicious Dependencies at Scale with Static Analysis
Explore static analysis techniques for identifying malicious dependencies in open-source packages, including Semgrep rules and metadata analysis to enhance software supply chain security.
Raining CVEs on WordPress Plugins with Semgrep
Leveraging Semgrep to identify vulnerabilities in WordPress plugins, reducing false positives, and automating XSS validation. Includes demos on custom rule creation and the XSSBomb tool.
Mapping the Minefield of Open Source Software Risks - DevOps 2024
Explore open source software risks, vulnerabilities, and remediation strategies. Learn about software composition analysis, reachability, and semantic versioning for effective dependency management.
Organizational Design for Efficient Product Development
Explore organizational structures' impact on product development. Learn to choose and implement the best structure for your team's needs and product stage.