What is the OWASP Top 10?
7 minute read time
Discover the significance of OWASP in cybersecurity – What is OWASP and why it is vital for developers and organizations? Dive deeper with Sonatype.
Read More...
OpenSSF responds to CISA, advocates for a multifaceted approach to software identification
5 minute read time
OpenSSF published a response to CISA's request for comment on their white paper about software identification
Read More...
What goes great with SLSA? Sonatype.
6 minute read time
Learn about seamless compatibility between SLSA and Sonatype products, highlighting the powerful synergy that can enhance your software security efforts
Read More...
How can SLSA help secure your software supply chain?
5 minute read time
Learn how Supply-chain Levels for Software Artifacts (SLSA) can help secure your software supply chain and provide a safer software development environment
Read More...
The history of Maven Central and Sonatype: A journey from past to present
11 minute read time
Explore the evolution of Maven Central, highlighting its crucial role in the Java ecosystem and software development overall and its connection to Sonatype
Read More...
How the SEC charges against SolarWinds highlight the cybersecurity liability of software companies
5 minute read time
Read about how the Securities and Exchange Commission charged SolarWinds and its chief information security officer for violating federal securities laws
Read More...
Software dependencies: A beginner's guide
5 minute read time
Explore software dependencies, their two main categories of direct and transitive, and find out how to manage software dependencies at scale
Read More...
Dependency mapping: A beginner's guide
8 minute read time
Explore dependency mapping, what it is, the benefits of mapping dependencies, and some tools that make the process easier.
Read More...
How manufacturing best practices can improve open source consumption and software supply chains
5 minute read time
Explore Sonatype's research paper developed in partnership with the Atlantic Council on software supply chain best practices for open source consumption
Read More...