Tag

#Semgrep

4 items tagged Semgrep.

Articles 2

CI/CD intermediate

A GitLab CI/CD Security Pipeline That Developers Do Not Route Around

The GitLab pipeline that gated this site while it ran CI: frozen installs, parallel quality gates, Trivy with SAST and secret detection, artifact verification, and one deployment owner behind protected main.

Aug 18, 2026 20 min read

CI/CD intermediate

Building a Secure CI/CD Pipeline with Jenkins

A declarative Jenkins pipeline with secrets scanning, SAST, image scanning and least-privilege credential handling — and the agent, plugin and Docker decisions that keep it that way.

May 7, 2026 9 min read

Tools 1

secure SAST

Semgrep

Fast, pattern-based static analysis with thousands of community and security rules.

Toolbox 1

Security Commands Scanners, secrets checks, hashes, keys and quick posture checks you can run from any terminal.