Join us

ContentUpdates and recent posts about OWASP Dependency-Check..
Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

GitHub Copilot DevOps Excellence: Prompt Files vs Instructions vs Chat Modes

GitHub Copilot just leveled up:prompt files,custom instructions, andcustom chat modesare live. Now it's not just tagging along—it’s shaping how you work. Automate code reviews, security scans, or implementation plans. Reuse setups across teams. Control it all from VS Code... read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Indexed Views in SQL Server: A Production DBA's Complete Guide

Indexed viewsare apowerfulyet underutilized feature in SQL Server for optimizing complex query performance, with potential for significant performance gains in read-heavy applications. Automatic query substitution is a game-changer when it comes to leveragingindexed viewsfor performance optimization.. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

GitOps Done Right: 10 Best Practices That Make It Work

GitOps ditches hand-rolled deployment scripts for a cleaner, declarative model. Git becomes the truth. Agents likeArgo CDorFlux CDwatch for changes and sync your clusters on their own. It’s not just about pushing YAML. Good GitOps setups lean onKustomizefor modular config, wire inautomated image up.. read more  

GitOps Done Right: 10 Best Practices That Make It Work
Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Writing a basic service for GNU Guix

A developer walks through building acustom GNU Guix system serviceforkmonad—yes, the keyboard remapper—by wiring up a newservice-typethat plugs intoShepherdandaccount-service-type. To get there, they lift patterns from services likewesnothd, usemake-forkexec-constructorto spin up the daemon, and de.. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

You might not need tmux

A dev swapped outtmuxfor a slick combo:Zellij,SSH multiplexing, andsystemdsocket daemons. No more virtual splits. Just clean session persistence and tight remote control. This setup brings scrollback back where it belongs—your terminal’s native buffer. It plays nice with extras like theKitty graphi.. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets

Truffle Security dropped a sharp new open-source tool that digs through GitHub’s public commit history looking forzero-commit force pushes—a tactic devs use to erase mistakes, usually secrets. Problem is, they don’t go quietly. By tapping into historical GitHub PushEvents via GH Archive, the tool h.. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Automating infrastructure deployments in the Cloud with Terraform and Azure Pipelines

This Azure lab wires upTerraformwithAzure Pipelines CI/CDto spin up infrastructure and deploy a .NET Core app using IaC. It handles remote state with Azure Storage, automatesplanandapplyin pipelines, and swaps in config values via token replacement during deploy... read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Zero Trust and Cloud-Native Windows

Microsoft’s moving the cheese again—this time steering Windows deep into the cloud. The old on-prem management playbook? Getting dusty. At the core:Intune, pushingZero Trustlike it means it. Identity-based access, always-on compliance, real-time config—no more trusting the device just because it’s .. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Cloudflare and the infinite sadness of migrations

A recent Cloudflare DNS outage traced back to legacy gear tangled with global config changes. Turns out, incomplete migrations can still pack a punch. Their newer topology system does support progressive rollouts—but running it side-by-side with the old one just made the blast radius bigger. System.. read more  

Cloudflare and the infinite sadness of migrations
Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Creating a GitHub App based Azure DevOps Pipelines Service Connection

Azure DevOps made it easier to link up with GitHub—no more re-installing the Azure Pipelines GitHub App to kick things off. Teams can spin up aGitHub App–based service connectiondirectly from a dummy pipeline setup. The service connection comes GitHub App–authenticated out of the gate. Super handy .. read more  

Creating a GitHub App based Azure DevOps Pipelines Service Connection
OWASP Dependency-Check is an open source Software Composition Analysis (SCA) tool that scans application dependencies to detect publicly disclosed vulnerabilities. It analyzes project manifests, package metadata, and binary artifacts, then matches them against multiple vulnerability databases, including the NVD. Dependency-Check supports Java, JavaScript, .NET, Python, Ruby, and many other ecosystems. Teams integrate it into CI pipelines, IDEs, and build systems to catch vulnerable libraries early and maintain secure software supply chains. As part of the OWASP foundation, it is widely trusted for transparent, vendor-neutral security scanning.