Pipeline security misconfigurations documented in real 2025-2026 breach postmortems - tj-actions/changed-files, Pwn Request pull_request_target attacks, GitHub Actions cache poisoning, npm worm supply-chain incidents - p...
Non-default BuildKit build-security flags: secret mounts, SBOM/provenance attestations, distroless size/CVE numbers, and named Docker Hub supply-chain incidents (Leaky Vessels CVEs, JFrog imageless-repo campaign).
Agent-facing 2026 JS/TS ecosystem verdicts: Node LTS lineage and the corepack/install-scripts breaking changes, Bun/Deno npm-compat numbers, Biome's type-aware linting, and the named 2025 supply-chain incidents that chan...
The current OWASP Top 10:2025 web application security risk categories with concrete mitigation guidance and code-level examples for each, grounded in the official OWASP release.