WriteUps Archive

devsecops

Security research, writeups, and technical analysis tagged with devsecops.

Published

Sep 12, 2026 8 min read

Detecting Secrets Before They Reach Production

Hard-coded secrets are one of the easiest ways for sensitive credentials to accidentally enter a software repository. A developer adds an API

Inspector_Zia

Read Writeup →

Custom SAST Rules with Semgrep: Extending Security Scanning Beyond Default Rules

Sep 04, 2026 7 min read

devsecops

Custom SAST Rules with Semgrep: Extending Security Scanning Beyond Default Rules

Static Application Security Testing (SAST) is an important part of modern application security. By analyzing source code before an application is deployed,

Inspector_Zia

Read Writeup →