Twenty-two scanners later, a pentester still walked in

Wed, 26 Aug 2026 14:00:00 +0700

I got tired of pasting the same scanner block into yet another repo.

It always started small. “Can we add Trivy here?” Sure. Semgrep next week. Secrets the week after. Then repo A and repo B quietly drifted apart—one job wrote into a folder git clean would erase, another uploaded an empty {} to DefectDojo like that counted as diligence. I wasn’t managing security. I was managing copies of the same bad mood.

CI/CD on Al Banna

Twenty-two scanners later, a pentester still walked in