Stay updated with breaking news from Security Scorecards. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Since the compromise of the SolarWinds Orion update mechanism two years ago this month, governments and the IT industry have made strides in trying to reduce the attack surface of applications. However, Google believes software supply chain security is still one of the most critical security risks facing the world. "There is an urgent need
The online giant analyzes, patches, and maintains its own versions of open source software, and now the company plans to give others access to its libraries and components as a subscription.
Google announces the Allstar GitHub app for continuous enforcement of best security practices - SiliconANGLE
The OSV schema aims to precisely describe vulnerabilities in a way tailored to the open source use case, "with the goal of automating and improving vulnerability triage for developers and users of open source software," Google stated in a blog post published on June 24. The project could allow various developer tools to natively handle vulnerability information and make it easier for users of open source components to know whether particular vulnerabilities affect their applications. The aim is to reduce the effort required to document vulnerabilities in open source projects, to make the is...