--- title: "devops--devsecops" lang: "en" author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/categories/devops--devsecops --- [All Categories](/devtips/categories) # Devops devsecops [Home](/)›[All Tips](/devtips)›[All Categories](/devtips/categories)›[Devops devsecops](/devtips/categories/devops--devsecops) Category # Devops devsecops CategoryAllDevOps & DevSecOps (5)Cloud & Infrastructure Automation (4)Kubernetes & Containers (2)Containers & Docker (1)Developer Tools & Productivity (1)DevOps & Kubernetes (1)DevOps & Observability (1)Kubernetes & Cloud Native (1)Kubernetes & DevOps (1)Observability & Monitoring (1)TagAllDevOps (7)Kubernetes (5)Terraform (5)IaC (4)CI/CD (3)DevSecOps (3)Docker (3)Infrastructure as Code (3)Microservices (3)Cloud Automation (2)Cloud Infrastructure (2)Cloud Native (2)Deployment (2)GitOps (2)Helm (2)Infrastructure (2)Monitoring (2)Observability (2)Security (2)Terragrunt (2)AI Agents (1)AI Tools (1)ArgoCD (1)Automation (1)Bash (1)BuildKit (1)CDKTF (1)CICD Security (1)Cloud Security (1)ClusterIP (1)Command Line (1)Compliance (1)Container Image (1)Container Orchestration (1)Container Security (1)Containerization (1)Containers (1)Continuous Delivery (1)Credentials (1)Developer Productivity (1)Developer Tools (1)Distributed Tracing (1)Distroless (1)Docker Cleanup (1)DRY Principle (1)Elasticsearch (1)ELK Stack (1)Environment Variables (1)Environments (1)GitHub Actions (1)GitHub Copilot (1)Governance (1)HashiCorp (1)Home Lab (1)IAM Roles (1)IDE Extensions (1)Image Optimization (1)Infrastructure Maintenance (1)K8s Services (1)Kibana (1)Least Privilege (1)LimitRange (1)Linux (1)LoadBalancer (1)Logging (1)Modules (1)Multi Stage Build (1)Multi Tenancy (1)Namespaces (1)NetworkPolicy (1)NodePort (1)OIDC (1)OPA/Rego (1)OpenTelemetry (1)OpenTofu (1)Pipeline Security (1)Platform Engineering (1)Policy as Code (1)Productivity (1)PruneMate (1)Pulumi (1)RBAC (1)Remote state (1)ResourceQuota (1)Secrets (1)Shell Scripting (1)Storage Management (1)Supply Chain Security (1)Terminal (1)Trivy (1)VS Code (1)Vulnerability Scanning (1)Workspaces (1)SortNewest firstOldest firstA to ZShortest read first [![GitHub Actions Secrets and Environment Variables: Handle Config the Right Way](/_astro/hero.DSfz34Ly_ZH1GxC.webp)](/devtips/post/github-actions-secrets-environment-variables-guide) ## [GitHub Actions Secrets and Environment Variables: Handle Config the Right Way](/devtips/post/github-actions-secrets-environment-variables-guide) - [DevOps & DevSecOps](/devtips/categories/devops--devsecops) - 08 Aug 2026 - 04 Mins read Why secrets handling matters Most CI leaks are config mistakes, not attacks Hey, want to stop leaking credentials in your pipelines? Most secret leaks in CI are not the result of some cle [#GitHub Actions](/devtips/tags/github-actions)[#Secrets](/devtips/tags/secrets)[#Environment Variables](/devtips/tags/environment-variables)+4 tags [Read Tip](/devtips/post/github-actions-secrets-environment-variables-guide) [![Container Image Vulnerability Scanning in CI/CD with Trivy](/_astro/hero.yY1orHlw_2oq3jw.webp)](/devtips/post/container-image-vulnerability-scanning-trivy) ## [Container Image Vulnerability Scanning in CI/CD with Trivy](/devtips/post/container-image-vulnerability-scanning-trivy) - [DevOps & DevSecOps](/devtips/categories/devops--devsecops) - 10 Mar 2026 - 04 Mins read Why container security matters Where the vulnerabilities hide A container image is one of the largest pieces of untrusted code you ship. Every image you build carries the base OS layer, [#Container Security](/devtips/tags/container-security)[#Vulnerability Scanning](/devtips/tags/vulnerability-scanning)[#Trivy](/devtips/tags/trivy)+4 tags [Read Tip](/devtips/post/container-image-vulnerability-scanning-trivy) [![Policy-as-Code Governance with OPA/Rego](/_astro/hero.CwAJ64Mi_1WeH9p.webp)](/devtips/post/policy-as-code-opa-rego) ## [Policy-as-Code Governance with OPA/Rego](/devtips/post/policy-as-code-opa-rego) - [DevOps & DevSecOps](/devtips/categories/devops--devsecops) - 24 Feb 2026 - 03 Mins read Why policy-as-code matters The governance problem Managing infrastructure at scale gets complicated fast. As your infrastructure grows, keeping it consistent and compliant gets harder. M [#Policy as Code](/devtips/tags/policy-as-code)[#OPA/Rego](/devtips/tags/oparego)[#Compliance](/devtips/tags/compliance)+4 tags [Read Tip](/devtips/post/policy-as-code-opa-rego) [![7 Reasons Learning the Linux Terminal is Worth It (Even for Beginners)](/_astro/hero.Ci9C_A6W_1AKnQ0.webp)](/devtips/post/7-reasons-learning-linux-terminal-worth-it-beginners) ## [7 Reasons Learning the Linux Terminal is Worth It (Even for Beginners)](/devtips/post/7-reasons-learning-linux-terminal-worth-it-beginners) - [DevOps & DevSecOps](/devtips/categories/devops--devsecops) - 05 Jan 2026 - 03 Mins read Why learn the Linux terminal? Why it still matters Even with the graphical tools and AI assistants available now, the terminal is the most direct way to work with a Linux system. It's a core [#Linux](/devtips/tags/linux)[#Terminal](/devtips/tags/terminal)[#Command Line](/devtips/tags/command-line)+4 tags [Read Tip](/devtips/post/7-reasons-learning-linux-terminal-worth-it-beginners) [![Securing CI/CD with IAM Roles](/_astro/hero.Bl9B2DZz_ZDIuXQ.webp)](/devtips/post/securing-cicd-with-iam-roles) ## [Securing CI/CD with IAM Roles](/devtips/post/securing-cicd-with-iam-roles) - [DevOps & DevSecOps](/devtips/categories/devops--devsecops) - 09 Jun 2025 - 03 Mins read Why secure your CI/CD pipeline? Why pipeline security matters Your pipeline holds credentials for every environment you deploy to, which makes it one of the most valuable targets you own. A s [#CICD Security](/devtips/tags/cicd-security)[#IAM Roles](/devtips/tags/iam-roles)[#Least Privilege](/devtips/tags/least-privilege)+4 tags [Read Tip](/devtips/post/securing-cicd-with-iam-roles)