Blogs

DevSecOps worst practices – the series

Semgrep

Quite often when we read best practices we are told ‘what’ to do, but not the ‘why’. When we are told to ensure there are no false positives in the pipeline, the reason seems obvious, but not every part of DevOps is that intuitive, and not all ‘best practices’ make sense on first blush.

Visit Site

London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep From Gatekeepers to Guardrails: Automating Your PCI DSS v4.0.1 StrategySemgrep Calling Your Video Game With Your Phone: Part 1Deepgram The Best (and Worst?) of Voice AI TechnologyDeepgram DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Cloud Systems: Deploying to Amazon ECSPulumi Platform Engineering & DevOps Series Kickoff AnnouncementPulumi IaC Best Practices: Implementing RBAC and SecurityPulumi CSS Hell | CSS-TricksCss Tricks PostgreSQL and Ducks: The Perfect Analytical PairingMotherduck Cerebras Raises $1 Billion Series H at $23 Billion ValuationCerebras Docker at Cloud Expo Asia: GenAI, Security, and New InnovationsDocker We Raised $25 Million from Tiger Global and Others to Unlock the Power of Voice Data and FuelDeepgram Launching a Framework for Responsible Practices for Synthetic MediaSynthesia Linux and Cloud Native Security: AlmaLinuxThenewstack Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack