Join us

ContentUpdates and recent posts about OWASP Dependency-Check..
 Activity
@simme started using tool Python , 2 weeks, 4 days ago.
 Activity
@simme started using tool PostgreSQL , 2 weeks, 4 days ago.
 Activity
@simme started using tool lxd , 2 weeks, 4 days ago.
 Activity
@simme started using tool Kubernetes , 2 weeks, 4 days ago.
 Activity
@simme started using tool K6 , 2 weeks, 4 days ago.
 Activity
@simme started using tool Juju , 2 weeks, 4 days ago.
 Activity
@simme started using tool Grafana Tempo , 2 weeks, 4 days ago.
Story
@cloudsignals shared a post, 2 weeks, 4 days ago
Director - Cloud Engineering, osttra

Terraform Production Readiness Cheatsheet

Terraform Terragrunt

Terraform working isn’t enough. Learn what it takes to make it production-ready — from backend design to security and automated pipelines.

Terraform Production Readiness Cheatsheet
Story
@cloudsignals shared a post, 2 weeks, 4 days ago
Director - Cloud Engineering, osttra

DevSecOps: Rapid & Secure Delivery

SonarQube Vault Kyverno Open Policy Agent (OPA) Trivy

If security is your last step, you’re already too late. This guide shows how to build a DevSecOps pipeline where security is continuous, automated, and invisible to delivery speed.

DevSecOps - Rapid & Secure Delivery
Link
@varbear shared a link, 2 weeks, 5 days ago
FAUN.dev()

Email address obfuscation: What works in 2026?

The article catalogs obfuscation methods:HTML entities,SVG in an object,display:none, JavaScript decoders, custom encodings, andAES‑256. It coversmailtoobfuscation, redirects (302/301,.htaccess), interaction-gated reveals, accessibility caveats, and ahoneypot-based spam-statistics system... read more  

OWASP Dependency-Check is an open source Software Composition Analysis (SCA) tool that scans application dependencies to detect publicly disclosed vulnerabilities. It analyzes project manifests, package metadata, and binary artifacts, then matches them against multiple vulnerability databases, including the NVD. Dependency-Check supports Java, JavaScript, .NET, Python, Ruby, and many other ecosystems. Teams integrate it into CI pipelines, IDEs, and build systems to catch vulnerable libraries early and maintain secure software supply chains. As part of the OWASP foundation, it is widely trusted for transparent, vendor-neutral security scanning.