Install Kiwi TCMS OSS and Apply a Trusted SSL Certificate (Two Options)
Kiwi TCMS is a powerful open-source test management system built on Django and MariaDB. In this guide, we’ll install Kiwi
Identity, Security & PKI
Identity, Security & PKI
Identity, Security & PKI
How to Manage Semgrep Scan Result in DefectDojo
Semgrep is a powerful static analysis tool for catching security vulnerabilities and code quality issues. But after scanning, teams often
Identity, Security & PKI
Enable SSO in DefectDojo with Keycloak using OpenID Connect (OIDC)
DefectDojo supports Single Sign-On (SSO) using OpenID Connect (OIDC). This guide shows how to securely integrate DefectDojo with Keycloak, making
Identity, Security & PKI
Install DefectDojo with Docker and HAProxy on Ubuntu 24.04
DefectDojo is an open-source application vulnerability management system designed to help security teams track, triage, and report security findings at
Identity, Security & PKI
Install and Use Semgrep
Semgrep is a fast, open-source static analysis tool for finding bugs, enforcing code standards, and identifying security issues. This guide
Identity, Security & PKI
Authenticate Harbor with Keycloak via OIDC
Secure your Harbor registry using Keycloak as an OpenID Connect (OIDC) identity provider. This guide walks you through configuring Keycloak
Identity, Security & PKI
How to Enable OAuth2 Login in ThingsBoard 4.0.1 Community Edition Using Keycloak and HAProxy
ThingsBoard is a powerful open-source IoT platform supporting device management, telemetry, dashboards, and multi-tenancy. In this guide, I’ll show you
Identity, Security & PKI
Enable Google Login by Adding Google as an Identity Provider in Keycloak
You can easily allow users to log in to your Keycloak realm using their Google accounts. This guide walks you
Identity, Security & PKI
Configure Keycloak Email with Zoho Mail on AWS EC2
When running Keycloak on an AWS EC2 instance, like my own deployment at keycloak.maksonlee.com, you’ll likely want to enable features
Identity, Security & PKI
How to Enable Role-Based Security in Jenkins
By default, Jenkins allows all logged-in users full access, convenient for testing, but dangerous for real teams. Even matrix-based security