Securing Software Supply Chains and Dependency Confusion — An Industry Perspective
28 minute read time
We sat down with experts from The Linux Foundation, Atlantic Council and Sonatype's own CTO to discuss recent software supply chain attacks, dependency confusion and security concerns.
Read More...
White House Releases Executive Order on America's Software Supply Chains
2 minute read time
Following recent SolarWinds attacks on multiple government agencies, US President Biden calls for comprehensive reviews of software supply chains.
Read More...
The SolarWinds Software Supply Chain Attack: How Developers Can Protect Applications
7 minute read time
The SolarWinds software supply chain attack has made it clear that open source developers need to act now and intelligently manage third party dependencies to protect their apps.
Read More...
Introducing Our 2020 State of the Software Supply Chain Report
2 minute read time
Sonatype's 2020 State of the Software Supply Chain Report shows that faster innovation and better risk management do not have to be mutually exclusive.
Read More...
Money Doesn’t Buy Happiness, but Happy Developers Protect Money
4 minute read time
Developers in mature DevOps practices are 1.2x happier than their grumpy peers in the financial sector. This impacts software security, and your wallet.
Read More...
UPDATE: 21 SaltStack Breaches with 2,900 Still Vulnerable
6 minute read time
When a vulnerability is announced in an open source project, ask immediately: have we ever used that open source component, and (if yes) where is it?
Read More...
Free DevOps: Hatched in Response to COVID-19
2 minute read time
All Day DevOps | Spring Break required organizing an online DevOps conference in 30 days for 4,000 people. It launches this Friday and is free to attend.
Read More...
Happy Developers Produce More Secure Software, Better Business Outcomes
3 minute read time
The 2020 DevSecOps Community Survey confirms correlations between DevSecOps culture and practices, and their influence on motivation and job satisfaction.
Read More...
Continuous Delivery For All
4 minute read time
Jez Humble addresses the four reasons he consistently hears why continuous delivery won't work in their organization -- and busts all the myths.
Read More...