Find and Fix Vulnerabilities in Seconds using GitHub PR Reviews with Line Comments

Pull request line comments highlight the exact line(s) of code that introduced a policy violation, giving developers all the information they need to remediate open source risks and innovate securely without sacrificing speed.
Developers need to k… Continue reading Find and Fix Vulnerabilities in Seconds using GitHub PR Reviews with Line Comments

NIST: Adopt a Secure Software Development Framework (SSDF) to Mitigate Risk of Software Vulnerabilities

This Spring, the National Institute of Standards and Technology (NIST), released updated recommendations (.pdf) to improve software resilience against vulnerabilities. This builds on an earlier, four-part framework released last year.
As the depar… Continue reading NIST: Adopt a Secure Software Development Framework (SSDF) to Mitigate Risk of Software Vulnerabilities

Building Microservice Architecture on Kubernetes

Istanbul is home to architectural wonders of the ancient world, such as the Hagia Sophia and the Basilica Cistern, but today Istanbul brings us microservice architecture, where smaller is better.
The post Building Microservice Architecture on Kube… Continue reading Building Microservice Architecture on Kubernetes

NIST Proposes Standards to Secure Government SDLC

Earlier this Summer, the National Institute of Standards and Technology (NIST), a part of the U.S. Chamber of Commerce, proposed a set of standards to address software supply chain attacks – and the growing need for better software security.
The p… Continue reading NIST Proposes Standards to Secure Government SDLC