<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>依赖扫描 on Plbear | Cuz Penguin QQ</title><link>https://www.plbear.com/tags/%E4%BE%9D%E8%B5%96%E6%89%AB%E6%8F%8F/</link><description>Recent content in 依赖扫描 on Plbear | Cuz Penguin QQ</description><generator>Hugo</generator><language>zh-cn</language><lastBuildDate>Wed, 15 Jul 2026 10:00:00 +0800</lastBuildDate><atom:link href="https://www.plbear.com/tags/%E4%BE%9D%E8%B5%96%E6%89%AB%E6%8F%8F/index.xml" rel="self" type="application/rss+xml"/><item><title>DevSecOps 落地：从 SAST 到依赖扫描的安全左移实践</title><link>https://www.plbear.com/posts/2026-07-15-devsecops-practice/</link><pubDate>Wed, 15 Jul 2026 10:00:00 +0800</pubDate><guid>https://www.plbear.com/posts/2026-07-15-devsecops-practice/</guid><description>DevSecOps 在微服务团队的落地实践，涵盖安全左移理念、SAST 静态分析、依赖漏洞扫描、容器镜像扫描、密钥检测、安全门禁、CI/CD 集成，以及从0到1构建安全体系的踩坑经验和效果数据。</description></item></channel></rss>