Vault Secret Rotation Fails in the Application, Not Vault
HashiCorp Vault secret rotation causes application downtime when a worker reads its credential once. Static roles do not overlap, and three fixes have measured costs in a Vault 2.1.2 sandbox.
#DevSecOps
Posts tagged DevSecOps on abchaudary.me.
Posts
Trivy and Snyk Gates in GitLab CI: What Should Block?
A Trivy and Snyk security gate in a GitLab CI pipeline earns its place by blocking the right merge: fixable critical and high findings stop, the rest report, and every ignore expires.