3-2-1, Lift off! It’s Time to Elevate Your Development with Sonatype Lift

Deep code analysis designed for developers and focused on code quality is here.
When you have an awesome new product aimed at helping developers catch and fix code quality issues during code review, it’s hard not to get excited. Then, combine that… Continue reading 3-2-1, Lift off! It’s Time to Elevate Your Development with Sonatype Lift

The Dot Zero Conundrum and the New Frontier of Securing Open Source

Over the past two years, I’ve spoken about more than 20 instances of adversaries intentionally publishing malicious components into public open source and container repositories. Adversaries used these attacks to mine cryptocurrency, steal p… Continue reading The Dot Zero Conundrum and the New Frontier of Securing Open Source