AppSec Application security audit: an in-depth guide Introduction What are application security audits? In information technologies departments, application security audits are systematic evaluations conducted to assess the security posture of an organization's applications. Application security audits involve finding possible threats and determining the organization's attack surface. The different vectors that attackers can leverage to harm a corporation
DevOps Why does DevOps recommend "Shift left" principles? Learn about the shift-left approach in cybersecurity and how it integrates security practices into the early stages of software development.
Code quality controls in our Node.js monorepo A concrete overview of our setup for code quality tools: This highlights how we lint/format code, with a clear focus configuration management through two primary tools: Eslint and Prettier.
Escape and Snyk officially partner to make GraphQL Security accessible to all developers! Snyk and Escape provide developers with the ability to secure their GraphQL applications during the development lifecycle through an industry-leading end-to-end AppSec approach that includes SAST, DAST, and Cloud Security. SAST and DAST for GraphQL Applications Integrating Escape with Snyk means that a dynamic application security testing tool (DAST) and
Monorepos, or the sedimentation of Escape across ages Every team at Escape works in the same repository. We decided to follow the so-called monorepo workflow. This repository is our ground; its layers are our (concise) history.
Open Source Introducing 🪝 Mookme 🪝, a git hook manager for monorepos Ever had troubles managing your git hooks in a monorepository ? We did too, so we created Mookme to solve our problems. Here is a git hook manager for dealing with different projects and languages, automated filtering, ease of configuration and setup.
Tutorial Guide to handling relational databases with Prisma, NestJS and GraphQL This articles presents a basic GraphQL application illustrating our methods and guidelines for producing backend code.
