How to Convert Your SBOM Between SPDX and CycloneDX Formats
7 minute read time
A step-by-step guide on how to convert between SBOM formats using tooling from the official repositories of SPDX and CycloneDX.
Read More...
Post-Conference Tech Spec: Why Building Your Ship (Application) with Raw Materials is a Bad Idea
12 minute read time
Get all the details of the presentation that Jamie Coleman, Developer Advocate on Sonatype’s Developer Relations team, gave at Voxxed Days Zurich 2023.
Read More...
Meet an Open Source Developer - A.J. Brown
5 minute read time
A.J. Brown, a Principal Engineer at Sonatype, discusses his journey and career in open source as part of our series for World Open Source Day 2023.
Read More...
Meet an Open Source Developer - Lex Vorona
8 minute read time
Lex Vorona, a Software Engineer at Sonatype, discusses his journey and career in open source as part of our series for World Open Source Day 2023.
Read More...
Meet an Open Source Developer - Allie Sierra
5 minute read time
Allie Sierra, Engineering Manager at Sonatype, discusses her journey and career in open source as part of our series for World Open Source Day 2023.
Read More...
Meet an Open Source Developer - Theresa Mammarella
3 minute read time
Theresa Mammarella, Developer Advocate on the DevRel team at Sonatype, discusses her journey and career in open source for World Open Source Day 2023.
Read More...
Going Online With the OWASP Vulnerability Management Guide Working Group
6 minute read time
The OWASP Vulnerability Management Guide (OVMG) project seeks to simplify vulnerability management into repeatable and scalable cycles.
Read More...
Best Practices in Dependency Management: Cooking a Meal of Gourmet Code
5 minute read time
Close to 85% of every application is open source software. Better understanding your software supply chain starts with understanding dependency management.
Read More...
Open Source Basic Practices for Higher Quality Code to Fundamentally Strengthen Your Project
8 minute read time
A look at some basic practices for higher quality code to help fundamentally strengthen your project.
Read More...