Security
Common vulnerability classes and the defensive patterns that keep applications and data safe. Ordered from foundational to advanced, 5 docs in this category.
Docs in Security
SQL Injection Prevention
How SQL injection actually works, why parameterized queries are the real fix (not string escaping), and the defense-in-depth practices that back them up.
Container Image Scanning
How image scanning finds known vulnerabilities before a container ever runs, and why a minimal base image and a non-root user matter more for security than any scanner added afterward.
Infrastructure as Code Security
How policy-as-code catches a non-compliant infrastructure change at the plan stage, before anything is provisioned, and why that timing is what makes it a real control rather than a post-incident audit trail.
Secrets Management
Why centralized, short-lived secrets replace hardcoded credentials in a mature DevSecOps pipeline, and which common patterns, environment variables included, quietly leak secrets anyway.
Kubernetes Security
How RBAC's default-deny, additive model, Pod Security Standards, and NetworkPolicy's default-allow-until-selected behavior fit together, and why each one surprises people coming from a simpler permissions model.