Incident timelines and security engineering wrap-up
Explains how to write incident timelines that separate facts, assumptions, decisions, evidence, and follow-up security engineering work.
Security Engineering
Archive for practical security engineering topics such as supply chain security, cloud security, secure coding, AI-assisted code review, DevSecOps, and vulnerability prioritization.
This archive covers operational security topics beyond malware sample analysis. It focuses on security criteria that can be checked inside development and operations workflows, including SBOM, provenance, CI/CD secrets, cloud IAM, container security, vulnerability prioritization, secure coding, and AI-assisted code review.
Planned Topics
- Software supply chain security: SBOM, SLSA, provenance, and dependency updates
- Cloud and container security: IAM, service accounts, image signing, and admission control
- DevSecOps: CI/CD secrets, GitHub Actions, Jenkins credentials, and GitOps auditability
- Vulnerability operations: CISA KEV, EPSS, CVSS limits, and patch prioritization
Post-8-Week Extension
- Secure Coding with AI: prompting AI to write safer code, checking whether your own code is secure, turning OWASP Top 10 into code review questions, triaging SAST results, and adding a human verification step after AI code review
Cloud IAM and service account least privilege
Explains how to reduce Cloud IAM overpermission through service account scope, workload identity, temporary credentials, audit logs, and review criteria.
Container image signing and scan result interpretation
Separates container image signing, digest verification, SBOM evidence, and vulnerability scan interpretation for release review.
CI/CD secret leak prevention criteria
Explains CI/CD secret leak prevention criteria with official documentation, operational checks, and limitations.
SBOM, SLSA, and provenance basics
Explains SBOM, SLSA, and provenance basics with official documentation, operational checks, and limitations.
GitHub Actions security checklist
Explains GitHub Actions security checklist with official documentation, operational checks, and limitations.
Kubernetes RBAC least privilege basics
Explains Kubernetes RBAC least privilege basics with official documentation, operational checks, and limitations.