DevSocial Articles · Cyber Security articles

31. GitHub Is Changing Dependabot Alert Retention: What Gets Deleted?

    Learn how Dependabot alert retention affects closed vulnerability records and what teams should preserve for security reporting, audits, compliance, and history.

    Riya PatelSep 283,6581,000

32. Should an AI Coding Tool Upload Your Entire Repository?

    Learn whether AI coding tools need to upload entire repositories, how code indexing and targeted retrieval work, and what developers should check for code privacy.

    Niharika GuptaSep 284,7251,000

33. CodeQL Is Deprecating Its All-Platform Bundle: What Changes for CI?

    Learn what CodeQL platform-specific bundles mean for CI, including self-hosted runners, installation scripts, architecture checks, migration steps, and troubleshooting.

    Riya PatelSep 284,7511,000

34. How to Check What Files an AI Coding Agent Can Read

    Learn how to check which files an AI coding agent can read, including workspace permissions, indexing, Git, shell access, secrets, network access, and C# projects.

    Niharika GuptaSep 253,7831,000

35. ZCode Codebase Indexing Incident: What Developers Should Check in AI Coding Tools

    Learn what developers should check after the ZCode codebase indexing incident, including repository access, index security, retention, permissions, and AI tool data flow.

    Niharika GuptaSep 252,5741,000

36. Managing GitHub Advanced Security Policies Across an Enterprise

    Learn how to manage GitHub Advanced Security across multiple organizations and repositories using enterprise policies, security configurations, defaults, enforcement, and REST API automation. This article explains how to create a consistent security baseline, manage repository coverage, handle legacy repositories, and reduce configuration drift in large GitHub environments.

    Nidhi SharmaSep 213,7071,000

37. Backend Response Queue Poisoning in C#: Understanding HTTP Desynchronization on Persistent Connections

    Learn how backend response queue poisoning can desynchronize persistent HTTP connections and cause cross-user data exposure in vulnerable API Gateway architectures.

    Anshu KulhadeSep 184,2771,000

38. GitHub AI Scan APIs: Automating AI-Powered Security Checks Across Pull Requests

    Learn how GitHub AI Scan APIs can automate AI-powered security checks across pull requests and integrate security analysis into modern development workflows.

    Niharika GuptaSep 153,8321,000

39. Azure AI Search Confidential Computing: Protecting Data During Vector Search

    Learn how confidential computing can protect sensitive data during Azure AI Search vector operations and strengthen security for privacy-sensitive search workloads.

    Niharika GuptaSep 112,0631,000

40. GitHub Actions Cache Security: When Should a Workflow Use Read, Write, or No Cache Access?

    Learn how to choose read, write, or no-cache access in GitHub Actions workflows and reduce security risks from untrusted builds and cache poisoning.

    Nidhi SharmaSep 114,0551,000

41. Running CodeQL C# Analysis on Linux ARM64 Runners

    Learn how to run CodeQL C# analysis on Linux ARM64 runners, including setup considerations, GitHub Actions integration, compatibility, and security analysis workflows.

    Aarav PatelSep 114,0601,000

42. GitHub OAuth Token Refresh: Building Safer Long-Lived Integrations with Expiring Tokens

    Learn how to build safer long-lived GitHub OAuth integrations by handling expiring tokens, token refresh, secure storage, authentication failures, and credential rotation.

    Niharika GuptaSep 24,4741,000

43. GitHub Ruleset Insights: Measuring Repository Governance and Policy Bypasses

    Learn how GitHub Ruleset Insights can help teams measure repository governance, identify policy bypasses, monitor ruleset enforcement, and improve enterprise GitHub security.

    Nidhi SharmaAug 313,2321,000

44. GitHub Credential Revocation by Token Type: Improving Enterprise Incident Response

    Learn how token-type-aware GitHub credential revocation can improve enterprise incident response by quickly identifying, invalidating, and containing compromised credentials.

    Nidhi SharmaAug 316,7941,000

45. GitHub Copilot MCP Allowlists: Securing AI Agent Tools in Enterprise Teams

    Learn how GitHub Copilot MCP allowlists can secure AI agent tools in enterprise environments by controlling tool access, permissions, trusted servers, and agent capabilities.

    Niharika GuptaAug 312401,000

46. CodeQL GitHub Actions Queries: Building a Workflow Injection Security Test Suite

    Learn how to use CodeQL with GitHub Actions to detect workflow injection vulnerabilities, unsafe expressions, untrusted inputs, and CI/CD security risks before production.

    Niharika GuptaAug 272,1211,000

47. GitHub Copilot MCP Allowlists: Designing Enterprise Controls for Agent Tools

    Learn how to design enterprise MCP allowlists for GitHub Copilot agent tools, controlling tool access, permissions, security risks, and governance.

    Niharika GuptaAug 275181,000

48. Fortifying the AI: Defending LLM Agents Against Indirect Prompt Injection

    Learn how to defend enterprise RAG systems against indirect prompt injection using LangGraph, retrieval validation, input sanitization, instruction isolation, and security controls.

    Tuhin PaulAug 263381,000

49. GitHub Code Scanning: Using Mitigated Alerts Without Hiding Security Risk

    Learn how GitHub Code Scanning mitigated alerts work and how security teams can document resolved risks without hiding important security information.

    Niharika GuptaAug 262511,000

50. GitHub Copilot in Teams: Securing Agent Access to Private Repositories

    Learn how to secure GitHub Copilot agents in Microsoft Teams when accessing private repositories, including permissions, identity, write access, and auditing.

    Ananya DesaiAug 262871,000

51. CodeQL 2.26.3: Testing GitHub Actions Workflow Security Detection

    Explore CodeQL 2.26.3 security detection for GitHub Actions workflows and learn how to test CI/CD pipelines for workflow-related security vulnerabilities.

    Niharika GuptaAug 253201,000

52. CodeQL 2.26.3: Testing GitHub Actions Security Detection in CI/CD

    Learn how to test CodeQL 2.26.3 security detection for GitHub Actions workflows and improve vulnerability detection in CI/CD pipelines.

    Saurav KumarAug 252821,000

53. Testing AI Database Agents Against Cross-Tenant Data Access

    Learn how to test AI database agents for cross-tenant data access risks using authorization checks, tenant isolation, and least-privilege security controls

    Nidhi SharmaAug 243271,000

54. The Future of Agentic AI: Why the Environment Matters More Than the Agent

    Learn how to secure AI agents with temporary permissions, execution isolation, runtime policies, human approval, and defense-in-depth controls for safer enterprise Agentic AI systems.

    Monika MundraAug 243211,000

55. GitHub Actions Security: Testing CodeQL Detection for Workflow Injection

    Learn how to use CodeQL to test GitHub Actions workflows for injection vulnerabilities and strengthen CI/CD security against malicious workflow inputs.

    Niharika GuptaAug 242,0421,000

56. NuGet Trusted Publishing: Designing Keyless Package Releases for .NET

    Learn how NuGet Trusted Publishing enables keyless .NET package releases using modern identity-based authentication to reduce long-lived credential and supply chain risks.

    Niharika GuptaAug 211,4311,000

57. GitHub Copilot Agent Plugins: Designing Secure Tool Permission Boundaries

    Learn how to secure GitHub Copilot Agent Plugins by designing tool permission boundaries, controlling access, reducing risks, and governing agent capabilities.

    Ananya DesaiAug 211,7961,000

58. NuGet Package Source Mapping: Preventing Dependency Confusion in .NET

    Learn how NuGet Package Source Mapping prevents dependency confusion attacks in .NET applications by controlling package sources and securing software supply chains.

    Ananya DesaiAug 202981,000

59. Testing AI Agent Tool Permissions with Deny-by-Default Policies

    Learn how to test AI agent tool permissions using deny-by-default policies, authorization controls, negative security tests, and least-privilege access strategies.

    Ananya DesaiAug 193,0921,000

60. NuGet API Key Security: Migrating to 30-Day Credentials in CI/CD

    Learn how to migrate NuGet API keys to 30-day credentials and secure .NET CI/CD pipelines against credential leakage, unauthorized package publishing, and supply-chain attacks.

    Aarav PatelAug 191,4511,000

Everything on Cyber Security, not only its articles: the Cyber Security page →