Why Software Composition Analysis (SCA) Demands Precision
3 minute read time
Software Composition Analysis: Getting to the Signal Through the Noise, by 451 Research, demonstrates Sonatype's leadership in software composition analysis.
Read More...
PyPi 'Cheese Shop' Malware Illustrates Software Supply Chain Risk Vector
3 minute read time
Malicious actors circumvented the PyPI package repo manager, a classic case demonstrating why understanding open source code dependencies is critical.
Read More...
DevOps at the US Patent and Trademark Office
4 minute read time
The US Patent and Trademark Office's Fee Processing Next Generation (FPNG) is an example of a government agency moving to a devops development environment.
Read More...
A World of Infinite Choice in Open Source Software
3 minute read time
The 2019 Software Supply Chain Report explains the development environment we're all living in and what we can learn from exemplar dev teams.
Read More...
Repository Management: An Easy Way to Minimize Risk
2 minute read time
Mykel Alvis (@mykelalvis) of Array Consulting urges developers to use a caching, and preferably security-scanning, artifact repository. Here's why.
Read More...
New Cloud-Native CI/CD Projects OpenShift Pipelines and Tekton
3 minute read time
Siamak Sadeghianfar of RedHat explains how the open source projects Tekton and OpenShift support cloud-native CI/CD projects.
Read More...
Achieving a Managed State Model For Your Software Supply Chain
3 minute read time
Secure software development processes share attributes with other human endeavors such as cooking, reading, and sports, says Santi Mulukutla of Sonatype.
Read More...
DevSecOps: Security at the Speed of DevOps
3 minute read time
Larry Maccherone of Comcast shares his DevSecOps Manifesto and strategies he's used to foster the cultural change necessary to implement DevSecOps.
Read More...
DevOps Culture: The Neuroscience of Behavior
3 minute read time
Helen Beal of Ranger4 takes a look at how the brain works, and what that means for cultural transformation. This is your brain on DevOps.
Read More...