This repo defines the automation and DevSecOps layer of the homelab. It ensures all services are built, scanned, signed, and deployed in a GitOps-first, security-by-default workflow.

The integration of artificial intelligence (AI) into DevSecOps is reshaping the way organizations approach security within their software development and deployment processes. As DevSecOps aims to ...

Job Scenario: I have set up a CI/CD pipeline for a full-stack blogging app hosted on GitHub. The project involves integrating Jenkins for build and deployment, using SonarQube for code quality checks, ...

In an ideal state, DevSecOps embeds secure development practices in a hyper-agile, continuous development environment instead of bolting security on at the end. However, implementation is rarely that ...

Traditional application security practices are not effective in the modern DevOps world. When security scans are run only at the end of the software delivery lifecycle (either right before or after a ...

Chick, T., Frye, B., and Reffett, A., 2025: The DevSecOps Capability Maturity Model. Carnegie Mellon University, Software Engineering Institute's Insights (blog ...

Nicolas Chaillan speaks on a panel at the Cybersecurity Leadship Forum. (FedScoop) The Department of Defense has issued a reference design architecture for DevSecOps in hopes of scaling the agile, ...