{"id":3965,"date":"2026-10-30T03:00:00","date_gmt":"2026-10-30T03:00:00","guid":{"rendered":"https:\/\/www.bestcardiachospitals.com\/blog\/?p=3965"},"modified":"2026-10-30T03:00:00","modified_gmt":"2026-10-30T03:00:00","slug":"devsecops-health-check-hard-evidence","status":"publish","type":"post","link":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/","title":{"rendered":"A DevSecOps Health Check Built on Hard Evidence"},"content":{"rendered":"

Cardiology earned its precision the hard way: every claim about a heart must be accompanied by a trace \u2014 an ECG strip, an imaging series, a lab value \u2014 and “the patient seems fine” is not a finding. Software pipelines deserve the same standard, and DevSecOps supplies it: security checks placed inside the delivery line, evidence retained for every build, and gate decisions backed by measurement rather than mood. What follows is an audit in checklist form, written for anyone assessing a delivery pipeline the way a clinician reads a chart \u2014 finding by finding, each with the evidence you should demand before writing the word “normal”. The reference standards behind every item are gathered at the DevSecOps entry of xOps School’s Ops Atlas<\/a>.<\/p>\n

The DevSecOps health check: ten findings to demand<\/h2>\n

Finding 1 \u2014 external build actions are frozen, not floating<\/h3>\n

Check:<\/strong> open the workflows and look at how third-party actions are referenced. Evidence:<\/strong> each one pinned to a specific commit, not a tag any publisher can move after the fact. The March 2026 Trivy episode \u2014 force-pushed tags delivering a tampered scanner build, contained the same evening \u2014 is the case study for why this finding matters, along with the earlier tj-actions compromise that leaked secrets through a popular action and ended with CISA advising rotation.<\/p>\n

Finding 2 \u2014 job permissions are scoped to the task<\/h3>\n

Check:<\/strong> does each workflow job hold rights beyond what its steps require? Evidence:<\/strong> a permissions block per job, read out loud, that survives the question “why does the documentation build see deployment credentials?”<\/p>\n

Finding 3 \u2014 no long-lived keys anywhere in CI<\/h3>\n

Check:<\/strong> inventory the credentials embedded in pipeline configuration. Evidence:<\/strong> federated identity \u2014 OIDC or its equivalent \u2014 issuing minutes-lived tokens at runtime, with the stored-key count at or near zero.<\/p>\n

Finding 4 \u2014 fork code runs broke and blind<\/h3>\n

Check:<\/strong> trace what happens when an outside contributor opens a pull request. Evidence:<\/strong> fork branches execute with no secret access, and no workflow executes untrusted code beneath the pull_request_target trigger. The OWASP CI\/CD Top 10 catalogues this class of failure from CICD-SEC-1 through 10; this finding addresses its most-exploited member.<\/p>\n

Finding 5 \u2014 gate rules inherit from the base branch<\/h3>\n

Check:<\/strong> where are the merge-gate definitions read from? Evidence:<\/strong> they are pulled from the base commit rather than the branch under review \u2014 otherwise the change gets to write its own examination.<\/p>\n

Finding 6 \u2014 secrets are screened twice and rotated first<\/h3>\n

Check:<\/strong> what stands between a credential and the repository history? Evidence:<\/strong> a local pre-commit scanner plus the server-side push guard, and a written drill: on leak, invalidate first, rewrite history second.<\/p>\n

Finding 7 \u2014 every build carries its papers<\/h3>\n

Check:<\/strong> ask to see what a build produces besides the artifact. Evidence:<\/strong> an SBOM, a signature, and provenance \u2014 with verification enforced at deploy time. SLSA’s Build ladder runs L0 to L3 and a Source track spans L1 to L4; GitHub attestations reach Build L2, or L3 with pinned reusable workflows. Signing without verifying is cardiology without reading the ECG: the strip exists, nobody looked.<\/p>\n

Finding 8 \u2014 the gate earns trust, per rule<\/h3>\n

Check:<\/strong> pick three blocking rules and demand their records. Evidence:<\/strong> effective false alarms near zero before enforcement, remarks under a tenth of reviewer traffic, changed-lines-only scope, a thirty-finding audition behind each rule, and a monthly override share under five percent. The field’s worked example showed the alternative: of 1,240 changes, 96 were refused and 22 of those overruled \u2014 an override share of 22.9 percent, and a gate nobody believed afterwards.<\/p>\n

Finding 9 \u2014 exceptions have owners and funerals<\/h3>\n

Check:<\/strong> count the open waivers and their ages. Evidence:<\/strong> each carries a name, a reason, and an expiry at ninety days maximum, with baseline debt scheduled separately and never blocking new work.<\/p>\n

Finding 10 \u2014 the team measures itself on the field’s metrics<\/h3>\n

Check:<\/strong> request the monthly numbers. Evidence:<\/strong> effective false-positive rate, override share, median and p90 fix time for new findings, escape rate, provenance coverage, pipeline overhead, exception health \u2014 the Atlas-proposed set. A self-assessment from OpenSSF Scorecard rounds out the picture; treat it as the chart review, not the diagnosis.<\/p>\n

Reading the DevSecOps results<\/h2>\n

Grading follows the same logic as any diagnostic panel: individual values matter less than pattern and trajectory. A pipeline can pass findings 1 through 5 and still fail the practice if finding 10 shows nobody reads the numbers; conversely, a team that measures well but skips fork isolation carries a known, published attack path straight into its build. Context shapes the plan of care, exactly as it does in medicine \u2014 cardiac ICU guidelines exist<\/a> because safety emerges from protocol plus judgment, never from either alone, and a pipeline audit earns its keep the same way.<\/p>\n

Two habits keep the check honest across the year. First, re-run it quarterly; pipelines drift as staff and code change, and drift caught early costs an afternoon instead of an incident. Second, instrument continuously rather than snapshotting \u2014 continuous signals caught the problems in the first place, the same reasoning that leads hospitals to install advanced heart monitoring technology<\/a> rather than trusting the annual physical. A finding that only exists in a slide deck is a memory, not a control.<\/p>\n

What a healthy pipeline looks like afterwards<\/h2>\n

Expect a short list of changes, each with a name and a date:<\/p>\n

    \n
  • three external actions pinned to exact commits;<\/li>\n
  • two jobs stripped of rights they never needed;<\/li>\n
  • one stored key retired in favor of federated identity;<\/li>\n
  • one analyzer rule demoted after failing its audition;<\/li>\n
  • one waiver allowed to die on schedule.<\/li>\n<\/ul>\n

    None of it makes headlines, and together it changes what an incident afternoon feels like \u2014 from archaeology to lookup. No certificate crowns any of this; the discipline has no official standard and nothing certifies DevSecOps, which is precisely why the evidence, item by item, has to do the certifying. Ten findings, ten traces, one page of metrics reviewed monthly. That is the whole health check, and like the clinical kind, it works best when nobody special has to remember it \u2014 the chart, not the hero, carries the memory.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Audit-style DevSecOps health check for delivery pipelines: ten findings to demand, the evidence behind each, and the metrics that prove a pipeline is healthy.<\/p>\n","protected":false},"author":11,"featured_media":3966,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1808],"tags":[],"class_list":["post-3965","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-healthcare-technology"],"yoast_head":"\nA DevSecOps Health Check Built on Hard Evidence - Best Cardiac Hospitals<\/title>\n<meta name=\"description\" content=\"Audit a pipeline with this DevSecOps health check: ten findings, the evidence to collect for each, and the metrics that separate health from hope.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A DevSecOps Health Check Built on Hard Evidence - Best Cardiac Hospitals\" \/>\n<meta property=\"og:description\" content=\"Audit a pipeline with this DevSecOps health check: ten findings, the evidence to collect for each, and the metrics that separate health from hope.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Cardiac Hospitals\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-30T03:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.bestcardiachospitals.com\/blog\/wp-content\/uploads\/2026\/10\/b2a-banner-1139950-banner.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Aarav Khurana\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aarav Khurana\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/\"},\"author\":{\"name\":\"Aarav Khurana\",\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/#\\\/schema\\\/person\\\/a497f4dd6c25744ad311f201c38fef5d\"},\"headline\":\"A DevSecOps Health Check Built on Hard Evidence\",\"datePublished\":\"2026-10-30T03:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/\"},\"wordCount\":994,\"image\":{\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/b2a-banner-1139950-banner.png\",\"articleSection\":[\"Healthcare Technology\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/\",\"url\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/\",\"name\":\"A DevSecOps Health Check Built on Hard Evidence - Best Cardiac Hospitals\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/b2a-banner-1139950-banner.png\",\"datePublished\":\"2026-10-30T03:00:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/#\\\/schema\\\/person\\\/a497f4dd6c25744ad311f201c38fef5d\"},\"description\":\"Audit a pipeline with this DevSecOps health check: ten findings, the evidence to collect for each, and the metrics that separate health from hope.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/b2a-banner-1139950-banner.png\",\"contentUrl\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/b2a-banner-1139950-banner.png\",\"width\":1200,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/devsecops-health-check-hard-evidence\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A DevSecOps Health Check Built on Hard Evidence\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/\",\"name\":\"Best Cardiac Hospitals\",\"description\":\"Heart Health at Its Best: Where Compassion Meets Excellence\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/#\\\/schema\\\/person\\\/a497f4dd6c25744ad311f201c38fef5d\",\"name\":\"Aarav Khurana\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/73eacda4493f0f29f7c3b791756ddf0d8407aba31a878aa53b29f495e94dd3ac?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/73eacda4493f0f29f7c3b791756ddf0d8407aba31a878aa53b29f495e94dd3ac?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/73eacda4493f0f29f7c3b791756ddf0d8407aba31a878aa53b29f495e94dd3ac?s=96&d=mm&r=g\",\"caption\":\"Aarav Khurana\"},\"url\":\"https:\\\/\\\/www.bestcardiachospitals.com\\\/blog\\\/author\\\/aarav-khurana\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A DevSecOps Health Check Built on Hard Evidence - Best Cardiac Hospitals","description":"Audit a pipeline with this DevSecOps health check: ten findings, the evidence to collect for each, and the metrics that separate health from hope.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/","og_locale":"en_US","og_type":"article","og_title":"A DevSecOps Health Check Built on Hard Evidence - Best Cardiac Hospitals","og_description":"Audit a pipeline with this DevSecOps health check: ten findings, the evidence to collect for each, and the metrics that separate health from hope.","og_url":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/","og_site_name":"Best Cardiac Hospitals","article_published_time":"2026-10-30T03:00:00+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-content\/uploads\/2026\/10\/b2a-banner-1139950-banner.png","type":"image\/png"}],"author":"Aarav Khurana","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Aarav Khurana","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/#article","isPartOf":{"@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/"},"author":{"name":"Aarav Khurana","@id":"https:\/\/www.bestcardiachospitals.com\/blog\/#\/schema\/person\/a497f4dd6c25744ad311f201c38fef5d"},"headline":"A DevSecOps Health Check Built on Hard Evidence","datePublished":"2026-10-30T03:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/"},"wordCount":994,"image":{"@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/#primaryimage"},"thumbnailUrl":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-content\/uploads\/2026\/10\/b2a-banner-1139950-banner.png","articleSection":["Healthcare Technology"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/","url":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/","name":"A DevSecOps Health Check Built on Hard Evidence - Best Cardiac Hospitals","isPartOf":{"@id":"https:\/\/www.bestcardiachospitals.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/#primaryimage"},"image":{"@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/#primaryimage"},"thumbnailUrl":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-content\/uploads\/2026\/10\/b2a-banner-1139950-banner.png","datePublished":"2026-10-30T03:00:00+00:00","author":{"@id":"https:\/\/www.bestcardiachospitals.com\/blog\/#\/schema\/person\/a497f4dd6c25744ad311f201c38fef5d"},"description":"Audit a pipeline with this DevSecOps health check: ten findings, the evidence to collect for each, and the metrics that separate health from hope.","breadcrumb":{"@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/#primaryimage","url":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-content\/uploads\/2026\/10\/b2a-banner-1139950-banner.png","contentUrl":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-content\/uploads\/2026\/10\/b2a-banner-1139950-banner.png","width":1200,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/www.bestcardiachospitals.com\/blog\/devsecops-health-check-hard-evidence\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.bestcardiachospitals.com\/blog\/"},{"@type":"ListItem","position":2,"name":"A DevSecOps Health Check Built on Hard Evidence"}]},{"@type":"WebSite","@id":"https:\/\/www.bestcardiachospitals.com\/blog\/#website","url":"https:\/\/www.bestcardiachospitals.com\/blog\/","name":"Best Cardiac Hospitals","description":"Heart Health at Its Best: Where Compassion Meets Excellence","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.bestcardiachospitals.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.bestcardiachospitals.com\/blog\/#\/schema\/person\/a497f4dd6c25744ad311f201c38fef5d","name":"Aarav Khurana","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/73eacda4493f0f29f7c3b791756ddf0d8407aba31a878aa53b29f495e94dd3ac?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/73eacda4493f0f29f7c3b791756ddf0d8407aba31a878aa53b29f495e94dd3ac?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/73eacda4493f0f29f7c3b791756ddf0d8407aba31a878aa53b29f495e94dd3ac?s=96&d=mm&r=g","caption":"Aarav Khurana"},"url":"https:\/\/www.bestcardiachospitals.com\/blog\/author\/aarav-khurana\/"}]}},"_links":{"self":[{"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/posts\/3965","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/comments?post=3965"}],"version-history":[{"count":1,"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/posts\/3965\/revisions"}],"predecessor-version":[{"id":3975,"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/posts\/3965\/revisions\/3975"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/media\/3966"}],"wp:attachment":[{"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/media?parent=3965"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/categories?post=3965"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bestcardiachospitals.com\/blog\/wp-json\/wp\/v2\/tags?post=3965"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}