Featured Article

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

Read More

SHARE:

Sonatype_Blog_Logo_White
tian-kuan-9AxFJaNySB8-unsplash
READ MORE

Identifying Security Vulnerabilities Inside a Jenkins Pipeline

By Katie McCaskey on October 16, 2019 JenkinsCI

2 minute read time

Justin Young (@whyjustin) demonstrates how a malicious component can access your connected network - and how to identify that component inside Jenkins.
Read More...
READ MORE

Achieving CI/CD with Kubernetes

By Ramit Surana on February 17, 2017 JenkinsCI

11 minute read time

This article explores two interesting pieces technology: Jenkins, a popular CI/CD tool, and Kubernetes, a popular orchestration engine for containers.
Read More...
READ MORE

Nexus, Continuous Delivery and DevOps: Slideshow Gallery

By Mark Miller on January 16, 2015 JIRA

1 minute read time

Nexus, Continuous Delivery and DevOps: Slideshow Gallery
Read More...