Topics / Build Securely
Build Securely
Secure software, pipelines, containers, and AI systems before release.
Application and Code Security
Secure application design, implementation, review, and testing.
8 published articles
CI/CD and Software Supply-Chain Security
Secure build, release, and dependency workflows.
9 published articles
Container and Kubernetes Security
Secure container workloads, orchestration, and operational boundaries.
4 published articles
AI Security
Secure AI-assisted systems and agents.
4 published articles
Latest published content
A Practical Secure Code Review Checklist
A defensive, risk-focused checklist for reviewing software changes before approval.
Threat Modeling a CI/CD Pipeline
A structured method for threat modeling a CI/CD pipeline's trust boundaries — from commit to deployment — using a fictional example pipeline.
Securing API Authentication and Authorization
How token-based API authentication and authorization actually fail in practice, and a repeatable procedure for reviewing object- and function-level checks before they do.