How to improve your software supply chain with a software security framework
8 minute read time
Enhance software supply chain security with a framework. Protect against attacks, meet regulations, and release secure software. Learn more now.
Read More...
How to convert your SBOM between SPDX and CycloneDX formats
7 minute read time
A step-by-step guide on how to convert between SBOM formats using tooling from the official repositories of SPDX and CycloneDX.
Read More...
Post-conference tech spec: Why building your ship (application) with raw materials is a bad idea
10 minute read time
Get all the details of the presentation that Jamie Coleman, Developer Advocate on Sonatype’s Developer Relations team, gave at Voxxed Days Zurich 2023.
Read More...
Meet an open source developer - A.J. Brown
5 minute read time
A.J. Brown, a Principal Engineer at Sonatype, discusses his journey and career in open source as part of our series for World Open Source Day 2023.
Read More...
Meet an open source developer - Lex Vorona
8 minute read time
Lex Vorona, a Software Engineer at Sonatype, discusses his journey and career in open source as part of our series for World Open Source Day 2023.
Read More...
Meet an open source developer - Allie Sierra
5 minute read time
Allie Sierra, Engineering Manager at Sonatype, discusses her journey and career in open source as part of our series for World Open Source Day 2023.
Read More...
Meet an open source developer - Theresa Mammarella
3 minute read time
Theresa Mammarella, Developer Advocate on the DevRel team at Sonatype, discusses her journey and career in open source for World Open Source Day 2023.
Read More...
Going online with the OWASP Vulnerability Management Guide Working Group
6 minute read time
The OWASP Vulnerability Management Guide (OVMG) project seeks to simplify vulnerability management into repeatable and scalable cycles.
Read More...
Best practices in dependency management: Cooking a meal of gourmet code
5 minute read time
Close to 85% of every application is open source software. Better understanding your software supply chain starts with understanding dependency management.
Read More...