Featured Article

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

By Ax Sharma on April 16, 2024 vulnerabilities

The Sonatype Security Research team has identified over 15,000 npm packages that flood npm registry in a new trend where devs involved in the blockchain and cryptocurrency communities are leveraging

Workflow automation: Publishing artifacts to Sonatype Nexus Repository using Jenkins Pipelines

By Dmitriy Akulov on June 12, 2020 AppSec

8 minute read time

Use Sonatype Nexus Repository to create an automated workflow to build, store, organize, and monitor the compiled Maven artifacts through a CI server.

Read More...

Anatomy of a Continuous Delivery Pipeline

By Peter Morlion on February 04, 2020 continuous deployment

3 minute read time

Kamalika Majumder explains the anatomy of a continuous delivery pipeline, its benefits, and five key principles to shape and refine it.

Read More...

GettyImages-1075234744-1

DevSecOps for a Dollar or Less

By Derek Weeks on October 07, 2019 OWASP

3 minute read time

The DevSecOps Maturity Model (DSOMM) helps you analyze your organization's development pipeline to see where you need to improve.

Read More...

DroneDelivery

Advancing Application Delivery

By Derek Weeks on September 17, 2019 AppSec

3 minute read time

Swati Shah of US Bank describes the steps required to implement Continuous Delivery in a regulated environment.

Read More...