Secure Coding Hats

Description: Devops is one of the best ways to follow the agile methodology but, if you include cybersecurity in such mechanisms, it becomes DevSecOps which is a good way to discover vulnerabilities and flaws in the code in earlier development stages in an automated basis.

Description: The CAPTCHA is annoying for us as humans, but it could be a great way to stop automatic attacks or bots like brute force, CSRF or even XSS attacks.

Description: Any input that is controllable by the user is susceptible of being manipulated and turn it as an evil payload for remote code execution on the victim server.

Description: A funny design of a samoyed reminding the importance of doing input validation before processing any user provided data.

Description: A funny design of a Shiba Inu telling that hardcoding secrets like passwords, tokens or key is not cool and he is right.

Description: To mitigate the risk of supply chain attacks or other similar ones that implies malicious code being incorporated in the code, it is recommended to perform malware scanning to the dependencies before using them into your project. This is a black background design version with white letters.

Description: Another secure coding design about the sensitive information disclosure caused by pushing code with secrets to the git repository. One of the ways to avoid this is by introducing the file names of the project with secrets into the .gitignore file. This is a black background version with white letters.

Description: A security funny awareness design to remind developers that secrets, passwords or api tokens is not a good practice.

Description: If you think that your architecture doesn't needs to be reviewed then try to threat modeling it. Probably you'll know about new weakness overlooked previously thanks to the different points of view provided by the different participants.