Featured Article

Sonatype Named in the 2023 Gartner® Magic Quadrant™ for Application Security Testing

By Tara Flynn Condon on May 23, 2023 AppSec

Sonatype is named to the 2023 Gartner Magic Quadrant for Application Security Testing (AST).

Power Up Your Dependencies: The Parallels of SBOMs and Mario Kart

By Amanda Yeo on April 21, 2023 secure software supply chain

7 minute read time

BOM Doctor streamlines SBOMs, optimizes open source choices, and boosts security. How does it compare to Mario Kart? Read on to find out.

Read More...

How to Convert Your SBOM Between SPDX and CycloneDX Formats

By Aaron Linskens on April 21, 2023 secure software supply chain

7 minute read time

A step-by-step guide on how to convert between SBOM formats using tooling from the official repositories of SPDX and CycloneDX.

Read More...

Protecting Software Developers from Malware with AI/ML Insights

By Mandeep Singh on April 20, 2023 featured

5 minute read time

Developer-targeted malware is a complex and difficult problem. A look at what tools and information are needed to reduce risk in your development pipeline.

Read More...

Wicket Good Development headline image (hands on a keyboard)

Wicked Good Development Episode 31: Testcontainers With Oleg Šelajev

By Kadi Grigg on April 11, 2023 Community

23 minute read time

Join Kadi Grigg and Jamie Coleman as they sit down with Oleg Šelajev of AtomicJar, Inc., for an episode packed with insights on Testcontainers.

Read More...

Malware Monthly - March 2023

By Sonatype Developer Relations on April 11, 2023 vulnerabilities

12 minute read time

March 2023's Malware Monthly dives into a series of information stealers uploaded to the PyPI registry, the latest OpenAI data leak, and more.

Read More...

Another SolarWinds? The Latest Software Supply Chain Attack on 3CX

By Luke Mcbride on April 06, 2023 Software Supply Chain

6 minute read time

Get insights on the recent 3CX software supply chain attack and the growing importance of effective dependency management to protect against cyberattacks.

Read More...

Sonatype Repository Firewall is an Easy Solution for a Big Problem

By Audra Davis-Hurst on April 03, 2023 secure software supply chain

6 minute read time

Discover Sonatype Repository Firewall's AI-driven protection for SDLCs, blocking malicious components and ensuring a more secure software supply chain.

Read More...

Post-Conference Tech Spec: Why Building Your Ship (Application) with Raw Materials is a Bad Idea

By Aaron Linskens on March 31, 2023 secure software supply chain

12 minute read time

Get all the details of the presentation that Jamie Coleman, Developer Advocate on Sonatype’s Developer Relations team, gave at Voxxed Days Zurich 2023.

Read More...

Visualize Your Open Source Governance With BOM Doctor

By Luke Mcbride on March 31, 2023 secure software supply chain

5 minute read time

Discover BOM Doctor, a free tool that simplifies open source dependency management with world-class research insights and powerful visualizations.

Read More...

Previous Next

Sonatype Named in the 2023 Gartner® Magic Quadrant™ for Application Security Testing

Power Up Your Dependencies: The Parallels of SBOMs and Mario Kart

How to Convert Your SBOM Between SPDX and CycloneDX Formats

Protecting Software Developers from Malware with AI/ML Insights

Wicked Good Development Episode 31: Testcontainers With Oleg Šelajev

Malware Monthly - March 2023

Another SolarWinds? The Latest Software Supply Chain Attack on 3CX

Sonatype Repository Firewall is an Easy Solution for a Big Problem

Post-Conference Tech Spec: Why Building Your Ship (Application) with Raw Materials is a Bad Idea

Visualize Your Open Source Governance With BOM Doctor

Secure your software supply chain

Subscribe for all the latest software security news and events