Featured Article
New Design, New Features: Maven Central Improvements for Developers
White House National Cybersecurity Strategy: Landmark Action for a Critical Threat
5 minute read time
The Biden administration announced a new, historic National Cybersecurity Strategy calling for cybersecurity liability and increased investment.
Read More...
2023 Predictions: What Will Happen in Software Supply Chain Governance?
8 minute read time
A look at what we're expecting in the coming year, including open source security, software supply chain attacks, regulation, DevOps, and more.
Read More...
Wicked Good Development: Key Takeaways From the State of the Software Supply Chain Report
3 minute read time
Jump into to these four bonus episodes to find highlights and critical takeaway's from Sonatype's 8th Annual State of the Software Supply Chain Report.
Read More...
Rule Over Your Dependencies and Scan at Your Own Open Source Risk
5 minute read time
A good way to make sure that your organization's vulnerabilities don't go unnoticed is conducting regular scans of open source used in your environments.
Read More...
Wicked Good Development Episode 11: Vulnerability Drills - The Intention, Habit, and Impact
27 minute read time
To prepare for the unexpected, check your code and run vulnerability drills to create muscle memory for engineering teams and build better software.
Read More...
Wicked Good Development Episode 10: The Evolution of Supply Chain Attacks
22 minute read time
This episode looks at how fraud detection and supply chain attacks are similar, the data science behind these systems, and developer behavior.
Read More...
A Non-Programmer Introduction to the Software Supply Chain (Electron)
3 minute read time
Connecting the larger use by the software industry of component programs to something most people have on their machine right now: The Electron Framework.
Read More...
White House Releases Executive Order on America's Software Supply Chains
2 minute read time
Following recent SolarWinds attacks on multiple government agencies, US President Biden calls for comprehensive reviews of software supply chains.
Read More...
DevSecOps In The Age Of Containers
3 minute read time
Containers and automated tools create new opportunities for software supply chains and opensource governance as well as system security. DevSecOps, application and system security are all visible in
Read More...