{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreiet7725stbaibk7hjsstgpqg6rzjudxanqrlrzcrqcw2mbwvzdb6m",
    "uri": "at://did:plc:gapzbf5nl5wxaqkqoecaeawh/app.bsky.feed.post/3miwaz47ll5x2"
  },
  "path": "/why-most-devsecops-pipelines-fail-at-runtime-security-not-build-time/",
  "publishedAt": "2026-04-07T10:54:33.000Z",
  "site": "https://devops.com",
  "tags": [
    "Blogs",
    "Business of DevOps",
    "Contributed Content",
    "DevSecOps",
    "Doin' DevOps",
    "Social - Facebook",
    "Social - LinkedIn",
    "Social - X",
    "configuration drift",
    "Continuous integration (CI/CD)",
    "DevSecOps pipelines",
    "Infrastructure as Code (IaC)",
    "runtime security",
    "security automation"
  ],
  "textContent": "Runtime risk refers to security exposure caused by configuration, identity or infrastructure changes after deployment.",
  "title": "Why Most DevSecOps Pipelines Fail at Runtime Security (not Build Time)"
}