Beyond npm Audit to Traverse an Increasingly Complex Dependency Tree
5 minute read time
Building good hygiene habits as part of our development practice helps the community at large. Here's how to use Nexus Repository OSS as part of it.
Read More...
Most common security acronyms explained
8 minute read time
SAST, DAST, CSA, OSSM, SCA? What do these acronyms mean, what exactly do they do, and why does it matter?
Read More...
For Distributed Teams, It’s Not All About the Tools
4 minute read time
A great distributed team starts with people with strong collaboration skills. The team needs time to understand each other's preferences to deliver value.
Read More...
Gartner: You Must Assess Overall Software Health and Welfare
4 minute read time
Gartner reports that mature organizations are expanding open-source management to include health assessment by default.
Read More...
The “Big Hack” That Actually Happened - Chinese Military Implicated in Equifax Breach
3 minute read time
Members of the Chinese Military were implicated in the attack on Equifax's software supply chain. It's time to take software supply chain hygiene seriously.
Read More...
Tara Hernandez Talks Code Rush, Google, DevOps
2 minute read time
Tara Hernandez reflects on her time at Netscape in 1998, how that experience informs her present work, and what DevOps trends continue to evolve.
Read More...
What Developers Need to Know About WhatsApp's Recent Security Dilemma
3 minute read time
Sonatype issues an Advisory Deviation Notice for CVE-2019-11932, a vulnerability that exploits processor memory and recently affected WhatsApp.
Read More...
Sonatype Hosts Global Gatherings of DevSecOps Leaders and Innovators
4 minute read time
October is dedicated to intimate gatherings of DevSecOps professionals, thought leaders, and decision makers in cities across North America and Europe.
Read More...
Security Should Stop Being a Drag
3 minute read time
An application should withstand automated, manual, or user testing. Security vulnerabilities, although extremely important, are in reality non-functional.
Read More...