Skip to content
Forums
Cybersecurity
AppSec
 
Notifications
Clear all

AppSec

Technical discussion of application security. SAST/DAST/SCA in CI, secret scanning, threat modeling, supply chain integrity, vendor comparisons.
RSS
Page 9 / 15

Is there a way to enforce that all agent-generated code passes the same SAST gates as human code?

Last post by Diego H., 2 months ago

Posts: 1
Views: 32


Practical question: Who 'owns' the security of an AI-generated script - the dev or the platform?

Last post by Brian H., 2 months ago

Posts: 4
Views: 26


Has anyone actually deployed IriusRisk effectively for threat modeling?

Last post by Bookworm42, 2 months ago

Posts: 3
Views: 40


Step-by-step: How we use OpenClaw's audit logs (and where they fall short).

Last post by Emma23, 2 months ago

Posts: 1
Views: 23


How do I convince our procurement team that an AI runtime needs a full security questionnaire?

Last post by crm_hopper, 2 months ago

Posts: 1
Views: 27


Anyone compared Snyk and JFrog Xray for vulnerability detection in production?

Last post by hannahb, 2 months ago

Posts: 1
Views: 16


What's the best practice for secret rotation when Claw agents hold long-lived API keys?

Last post by barbaraj, 2 months ago

Posts: 2
Views: 20


Best threat modeling tool for small teams using agile

Last post by clarag, 2 months ago

Posts: 6
Views: 39


Showcase: My CI pipeline now rejects any Claw plugin that requests 'shell_exec' permission.

Last post by devops_dad_joke_v3, 2 months ago

Posts: 5
Views: 37


GitHub secret scanning vs GitGuardian for a GitHub-heavy org

Last post by amandaf, 2 months ago

Posts: 1
Views: 19


Page 9 / 15
Share:
Share
Tweet
Share
Share