[{"data":1,"prerenderedAt":43},["ShallowReactive",2],{"blog-tag-en-devsecops":3},[4,16,24,33],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fcicd-pipeline-devsecops-gate-design-four-layers","Still Bolting Security Checks Onto Your CI\u002FCD Pipeline Without Deciding Where They Belong? A Four-Layer Model for DevSecOps Gate Design","You've adopted SAST, DAST, and container scanning — yet incidents still slip into production. This article reframes CI\u002FCD pipeline security as a four-layer design problem and walks through concrete implementation patterns for K3s\u002FKubernetes environments.","2026-08-28",[10,11,12,13,14,15],"k3s","kubernetes","ci-cd","devsecops","admission-control","gitops",{"path":17,"title":18,"description":19,"date":20,"tags":21},"\u002Fblog\u002Fen\u002Fgitlab-auto-devops-k3s-admission-controller-gate","Why GitLab Auto DevOps' 'It Just Works' CI Is the Closest Threat to Your Production K3s Cluster","GitLab Auto DevOps runs SAST\u002FDAST automatically the moment you turn it on. But a scan 'running' and a vulnerable image never reaching your production K3s cluster are two completely different things. Here's how to build an audit gate between CI\u002FCD and the cluster.","2026-08-17",[10,11,22,12,13,23],"gitlab","admission-controller",{"path":25,"title":26,"description":27,"date":28,"tags":29},"\u002Fblog\u002Fen\u002Fcicd-pipeline-security-devsecops","ci-cd Pipeline Security: A Practical DevSecOps Guide","A practical guide to ci-cd pipeline security from a DevSecOps perspective. Covers SAST\u002FDAST, supply chain protection, the SLSA framework, and Policy as Code.","2026-05-27",[13,12,30,31,32,11],"security","supply-chain","slsa",{"path":34,"title":35,"description":36,"date":28,"tags":37},"\u002Fblog\u002Fen\u002Fdocker-security-scanning-best-practices","Docker Container Security: Scanning and Vulnerability Management","A practical guide to integrating vulnerability scanning into your container ci-cd pipeline. Compare Trivy, Snyk, and Grype, implement shift-left security, and build defense-in-depth with Harbor.",[38,30,39,40,41,42,13],"docker","vulnerability-scanning","trivy","snyk","container-security",1792488952415]