GitHub Actions

Secure your software supply chain with the Sonatype and GitHub integration
To prioritize software supply chain security, organizations can focus on seamless integrations that improve visibility and simplify workflows, ensuring more efficient development processes ...

Inserting security in Github pull requests! — Part 2 (using Github Actions)
Inserting security in GitHub pull requests! — Part 2 (using GitHub Actions)This post builds up in a previous post about inserting code analysis into GitHub pull requests, in this post, we will focus on ...
Win a $100 Gift Card: Take a Brief Survey on Software Composition Analysis
Sonatype is building a software composition analysis tool for GitHub Actions and would love to understand your needs. If you are excited about GitHub Actions and looking for ways to understand the ...