Tarik YegenDynamic Application Security Testing (DAST)Dynamic Application Security Testing (DAST) involves evaluating the security of an application while it is running by simulating real-world…1d ago1d ago
Tarik YegenSecrets Management in KubernetesSince we need to use automated workflow in the DevOps approach and we provide deployment with the GitOps approach, we cannot put the…Aug 25Aug 25
Tarik YegenPolicy as Code: OPA GatekeeperIn software development, some developers may not know the security best practices, especially when preparing Kubernetes manifest files. For…Aug 18Aug 18
Tarik YegenSecure Deployment With ArgoCDArgo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It follows the GitOps pattern of using Git repositories as the…Aug 12Aug 12
Tarik YegenAutomated Software Composition AnalysisDevelopers use many 3rd party dependencies during the application development phase. Therefore, the primary components of the completed…Feb 8Feb 8
Tarik YegenDefectDojo for DevSecOpsWhen we automate the security scanning of an application, the security tools we use can provide us with different findings. Therefore, for…Jan 31Jan 31
Tarik YegenGitLeaks: A Secret Scanner ToolIn DevOps processes, automating the delivery of code changes and new features to end user seamlessly and frequently, with CI process where…Jan 1Jan 1
Tarik YegenK8s : Creating a Dedicated User (ServiceAccount) With Restricted Permissions for GitLabIs it right to give GitLab admin permission to run kubectl commands in pipelines? Imagine that GitLabin has been hacked, with admin…Dec 27, 2023Dec 27, 2023
Tarik YegenMicroservice ProjectWhile developing applications, it is well known that nowadays applications are developed in microservice architecture rather than in…Nov 25, 2023Nov 25, 2023