In two minutes, we can show you a full software bill of materials for your application. We can also identify any known vulnerabilities in the open source
In two minutes, we can show you a full software bill of materials for your application. We can also identify any known vulnerabilities in the open source
Many development organizations we work with have turned to SonarQube as a dashboard to visualize and measure their code quality.
In our recent open source developer survey we asked, what are the TOP FOUR characteristics considered when selecting a component? And since components are
Heartbleed has put the security community on notice: it is time to take a harder look at the security status of open source components and frameworks. After
Last week, I joined the Sonatype engineering team at the yearly summit where we got together and discussed the future roadmap for Nexus and CLM, talk with
Applications are becoming the primary security threat vector. Since applications are constructed from 3rd party components, there continues to be a tremendous
Last week I was a host of October Nexus Live and attended DevOpsDays Vancouver. In both events Sonatype Nexus and CLM were present as part of a devops pipeline
