Sonatype Unveils State-of-the-Art Artificial Intelligence Component Detection

Sonatype Unveils State-of-the-Art Artificial Intelligence Component Detection

In the rapidly evolving world of software development, the adoption of artificial intelligence (AI) and machine learning (ML) is no longer just a trend—it's a revolution ...
How manufacturing best practices can improve open source consumption and software supply chains

How manufacturing best practices can improve open source consumption and software supply chains

The biggest problem facing software organizations today is an inability to track, monitor, and improve the usage of open source software. This isn’t about security alone. From DevOps to DevSecOps, there are ...

Introducing YaRadare

Deepfence YaRadare (“Ya-Radar”) scans container images, running Docker containers, and filesystems to find indicators of malware. It uses a YARA ruleset to identify resources that match known malware signatures, and may indicate ...
Reachability and Risk: Tools for Security Leaders

Reachability and Risk: Tools for Security Leaders

By Malcolm Harkins, Bryan Smith, Rob LundyAttacker Reachability (or “Attackability”), is a concept in open source software vulnerability management. It’s a way to understand if, 1) a vulnerability is present, and 2) Can ...

How to Establish an Open Source Program Office

It feels like some people don’t have a strong understanding of open source. Some misunderstandings have come from working with open source in an environment filled with proprietary software. When the words ...

OSS Index Contributor Asks: Where ‘R’ You?

Editor's Note: Many people contribute their time and talents to open source projects. It's always interesting to discover the diversity of expertise and perspective. Many developers are introduced to Sonatype by way ...
It’s Time to Update Your Drupal Now!

It’s Time to Update Your Drupal Now!

As part of our ongoing mission to help organizations develop and deploy more secure software and applications, and in light of Checkmarx’s expanded insight into the open source security landscape with its ...

How to Become an OSS Champion

Open source software components yield a competitive marketplace advantage. So why do some development teams resist and rebel? ...
The Open Source Cookbook: A Baker’s Guide to Modern Application Development

The Open Source Cookbook: A Baker’s Guide to Modern Application Development

It is often said that open source software is like a recipe. In this context, let’s discuss your grandmother’s favorite cookies. It’s quite possible your grandmother is known throughout the family as ...
Automox open source M&A

Automate Software Security Checks to Find Open Source Software, SDK Perils

The reusability and convenient utility of open source software (OSS) and software development kits (SDKs) has been a boon to mobile application developers. Both types of software shortcuts help developers save time ...
Security Boulevard

Secure Guardrails