<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Security Scanning on SRE Engineering Practice</title><link>https://www.sre.wang/en/tags/security-scanning/</link><description>Recent content in Security Scanning on SRE Engineering Practice</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Tue, 18 Aug 2026 10:41:09 +0800</lastBuildDate><atom:link href="https://www.sre.wang/en/tags/security-scanning/index.xml" rel="self" type="application/rss+xml"/><item><title>False Positive Rate from 70% to 5%: A Four-Layer Security Gate Design and False Positive Management in CI/CD</title><link>https://www.sre.wang/en/posts/cicd-security-scanning-quality-gate/</link><pubDate>Tue, 18 Aug 2026 10:41:09 +0800</pubDate><guid>https://www.sre.wang/en/posts/cicd-security-scanning-quality-gate/</guid><description>Four-layer security scanning gate design covering SAST, SCA, container images, and secret detection. Includes false positive management with a three-step approach, tiered quality gate strategy, and a complete GitLab CI pipeline configuration.</description></item></channel></rss>