# AppSec Newsletter 0008

### Links

* \[artigo\] [Github Blog :: Introducing auto-triage rules for Dependabot](https://github.blog/2023-09-14-introducing-auto-triage-rules-for-dependabot/)
    
* \[cursos\] [ProdSec Academy :: Treinamentos em AppSec (2 dias free trial](https://www.productsecurity.ai/))
    
* \[tool\] [Microsoft OSSGadget :: Collection of tools for analyzing open source packages.](https://github.com/microsoft/OSSGadget)
    
* \[artigo\] [Semgrep :: Preventing secrets in code](https://semgrep.dev/blog/2023/preventing-secrets-in-code/)
    
* \[artigo\] [Canva Developers :: When URL parsers disagree (CVE-2023-38633)](https://www.canva.dev/blog/engineering/when-url-parsers-disagree-cve-2023-38633/)
    

### Vagas

* [Security Engineer Pleno (AppSec) - Dock](https://www.linkedin.com/jobs/view/3698104348/)
    
* [Staff Security Engineer (AppSec) - Stone](https://www.linkedin.com/jobs/view/3717297190/)
    

### **Siga o Guia de AppSec nas redes!**

Site: [**https://www.guiadeappsec.com.br/**  
Youtube](https://www.guiadeappsec.com.br/Youtube): [**https://www.youtube.com/@GuiadeAppSec**  
Twitter](https://www.youtube.com/@GuiadeAppSecTwitter) / X: [**https://twitter.com/guiadeappsec**](https://twitter.com/guiadeappsec)