Featured Article
New Design, New Features: Maven Central Improvements for Developers
Prioritizing Open Source Vulnerabilities: Is Reachability Useful?
8 minute read time
Good software composition analysis (SCA) can reduce open source risk, but poor results slows development. Can prioritization based on reachability help?
Read More...
Return on Investment in Software Composition Analysis?
4 minute read time
Having become a more standard part of the software development process, SCA is increasingly taken for granted as worth the investment, but is it?
Read More...
Effective Tools for Software Composition Analysis
4 minute read time
Better developer tools for the software supply chain mean a faster, more effective team. Sonatype customers share the tools that help them move faster and with less risk.
Read More...
A secure software supply chain requires higher quality data. Sonatype customers share why its software compositional analysis intelligence means greater confidence that real vulnerabilities will be
Read More...
Considering Nexus Auditor? You Should, But Know These Things First
3 minute read time
Nexus Auditor, in the right use case, is a solid, cost-effective solution. Is Nexus Auditor the solution for you? Maybe, maybe not. Here's how to find out.
Read More...
Octopus Scanner Compromises 26 OSS Projects on GitHub
3 minute read time
The Octopus Scanner malware compromised 26 open source projects hosted on GitHub in a new form of software supply chain attack targeting NetBeans projects.
Read More...
Real Talk: What Users Really Look For in a Software Composition Analysis (SCA) Solution
4 minute read time
Real users explain what you should demand from your SCA tools, including visibility through an SBOM, continuous monitoring, and the ability to scan apps.
Read More...
Your Guide to AppSec Tools: SAST or SCA?
4 minute read time
Software composition analysis speeds time to innovation by automating manual open source governance processes that are prone to errors.
Read More...
Win a $100 Gift Card: Take a Brief Survey on Software Composition Analysis
2 minute read time
If you are excited about GitHub Actions, and want to understand the open source dependencies in your software, fill out this survey for a chance to win.
Read More...