Category
Security
Application and cloud security for developers: Snyk, Trivy and dependency scanning, SAST versus DAST, container security and secure authentication patterns.
-
Apr 25, 2026
OWASP ZAP GitHub Actions Tutorial: Automate Your DAST Security Scanning
Run OWASP ZAP security scans in GitHub Actions: baseline and full scans, rules files for false positives, and reading the generated reports.
-
Apr 25, 2026
Mastering Semgrep Custom Rules for Security Testing: A Deep Dive
Write custom Semgrep rules for security: pattern syntax, taint mode, testing rules, running them in CI and catching an IDOR vulnerability.
-
Apr 25, 2026
The Best Open Source Container Security Scanners for 2026: A Hands-On Guide
Open-source container scanners compared: Trivy, Grype and others for image vulnerabilities, adding them to CI/CD, and runtime security beyond scans.
-
Apr 25, 2026
Spring Boot Actuator Security Best Practices: Stop Leaking Your App’s Internals
Secure Spring Boot Actuator: separate management port, least privilege, role-based access, sanitised values and disabling unneeded endpoints.
-
Apr 25, 2026
Best Security Extensions for Developers: Hardening Your Workflow in 2026
Browser security extensions for developers: password managers, header inspectors, script blockers and tools that reduce your attack surface.
-
Apr 23, 2026
Spring Security OAuth2 Tutorial Step by Step: Secure Your Java APIs
Spring Security OAuth2 step by step: set up the project, configure an identity provider, build the security filter chain, add RBAC and test it.