Github Advisory Database News Today

New GitHub feature will update developers about potential vulnerabilities within their actions.

There are thousands of vulnerabilities in open source code – GitHub aims to help developers see if their projects are impacted.

SBOMs should be connected with vulnerability databases to fulfill their promise of reducing risk, Google security team says.

GitHub’s supply chain security features including the advisory database, Dependabot alerts, and dependency graph are now available for Rust Cargo files.

GitHub’s supply chain security features including the advisory database, Dependabot alerts, and dependency graph are now available for Rust Cargo files.

A 10-point plan to improve the security and resilience of open source software was presented this week at a summit in the US

The Microsoft company will allow community members to add information and code samples to security advisories using the standard pull request to change the document.

The GitHub Advisory Database is now open to community contributions to help further the security of open source software.

Community members, enthusiasts, researchers, and academics are now able to submit their own research to widen the understanding of security vulnerabilities

The world of open source security is fast moving, with new vulnerabilities and different attack vectors driving the community to continuously (...)