Stay Relevant.

Hari 18: Docker Hardening, 8 Lapis Pertahanan Container

Bikin Docker container jadi benteng dengan 8 layer security: read-only filesystem, no-new-privileges, cap_drop, resource limits. Defense in depth di praktik.

devsecops

docker

container-security

22 Jun 20266 min read

Hari 17: Distroless 8MB vs Alpine 352MB, Sama-Sama 0 CVE

Scan Docker image dengan Trivy — distroless 8MB vs alpine 352MB, keduanya 0 CVE. Tapi attack surface jauh berbeda. Ini kenapa CVE count bukan satu-satunya metric.

devsecops

docker

trivy

21 Jun 20264 min read

Hari 16: Docker Image 8MB, Distroless Bikin Aman

Fase 2 dimulai! Bikin Docker image SecureBank API cuma 8MB pakai multi-stage build dan distroless. Build di alpine, run tanpa OS — attack surface minimal.

devsecops

docker

distroless

20 Jun 20265 min read

Hari 15: Fase 1 Selesai, 4 Quality Gates, 0 CVE

Fase 1 selesai! 15 hari membangun pipeline CI/CD dengan 4 quality gates, 17 security fixes, threat model 18 ancaman, dan 0 CVE tersisa.

devsecops

fase-1-complete

retrospective

18 Jun 20264 min read

Hari 14: Fake Secret, Gitleaks Gak Detect — Dan Fixnya

Hari keempat belas! Commit fake secret buat test pipeline — dan nemuin gap: Gitleaks gak detect file yang di-gitignore. Tambah --no-gitignore flag, sekarang catch semua leak.

devsecops

gitleaks

secret-scanning

18 Jun 20263 min read

Hari 13: Threat Modeling STRIDE & DREAD untuk API Perbankan

Hari ketiga belas! Membuat threat model lengkap untuk SecureBank API — 18 ancaman STRIDE, 12 DREAD score, attack tree, dan mitigation roadmap. Temuan paling kritis: no rate limiter dan no user-scoped authorization.

devsecops

threat-modeling

stride

17 Jun 20264 min read

Page 9 of 13 • 76 articles