Page 4 - Software Artifacts News Today

Healthy developer-team culture and adherence to DevSecOps best practices to protect against supply chain attacks are surprisingly commonplace in today’s security environment, according to a report from Google and Chainguard

Healthy developer-team culture and adherence to devsecops best practices to protect against supply chain attacks are surprisingly commonplace in today’s security environment, according to a report from Google and Chainguard

/PRNewswire/ -- Today, ActiveState announced the availability of the ActiveState Artifact Repository, the first artifact repository in the industry to enable...

The US government is adding to the public discourse while we’re all sorting out software supply chain security best practices.

Software systems are complex, and development teams have conflicting goals. Oh, and people are imperfect.

The Log4j vulnerability first hit the headlines in December last year. Since then weve heard less about it, but it hasnt gone away, like most vulnerabilities it has a long tail.

Scorecards automatically generates a score for open-source projects based on potential vulnerabilities and dependencies.

Security teams need a standard set of processes for locking down roots of trust for software artifacts, and developers need a clear path to balance open source selection against security policies. Open source has answers.

Security and governance policies and practices are failing to keep up with the growth of SaaS usage. The Cloud Security Alliance's guidance aims to get that back on track.

COMPANY NEWS: Aqua Security, the leading pure-play cloud native security provider, and the Center for Internet Security (CIS), an independent, non-pro...