Stay Relevant.

Building a Tailscale Subnet Router on AWS with Terraform

From zero to working Tailscale Subnet Router on AWS using Terraform. Access a Private EC2 from your laptop without a public IP. Fully automated!

terraform

aws

tailscale

28 Jul 20264 min read

Hari 49: AI Remediation Node — LLM Auto-Summarize Scanner Findings ke Slack

Scanner findings (Semgrep, Checkov, Trivy) otomatis di-summarize oleh LLM gratis (OpenCode Zen deepseek-v4-flash-free) dan diposting ke Slack. 3 format scanner dinormalisasi ke unified schema. Cloudflare WAF block urllib fixed.

devsecops

ai remediation

llm

27 Jul 20263 min read

Hari 48: Intelligent Alert Routing — Falco CRITICAL Alerts ke Slack

Falco CRITICAL alerts otomatis terkirim ke Slack #security-alerts via Python webhook receiver. DNS fix: host.k3d.internal → host.docker.internal. End-to-end test sukses.

devsecops

falco

alert routing

26 Jul 20263 min read

Hari 47: DefectDojo API — 7 Scans, 16 Findings Centralized

Upload 7 scanner reports (Trivy, Semgrep, Checkov) ke DefectDojo via import-scan API. 15 tests imported, 46 findings centralized. upload-scans.sh script + conditional CI job. ZAP needs XML format.

devsecops

defectdojo

api integration

25 Jul 20264 min read

Hari 46: DefectDojo — Vuln Management Dashboard

DefectDojo via Docker Compose — no clone 358MB repo, standalone compose file, 7 containers, port 8088. Single pane of glass untuk semua scan findings. Fase 4 dimulai!

devsecops

defectdojo

vulnerability management

23 Jul 20263 min read

Hari 45: Fase 3 Complete — K8s & Runtime Security

15 hari, 6 defense layers, 12 lessons. Fase 3 K8s & Runtime Security selesai! Kubesec 0→12, Checkov 20→0, Falco 29 rules, 6 alerts fired. Defense in depth proven. Retrospective complete.

devsecops

kubernetes

retrospective

22 Jul 20265 min read

Page 4 of 14 • 79 articles