Continuous Integration Open Source SDLC Security 
CircleCI
AUGUST 4, 2022
This collection of agents and actors involved in the software development lifecycle (SDLC) is called the software supply chain. Because you are working with several moving parts — including open source material, APIs, and so on — it is crucial to know just how secure each component of your software supply chain is.
Tenable
OCTOBER 27, 2022
Google’s annual DevOps report finds that organizations with a low-blame, collaborative approach have stronger app dev security practices. . For the first time in eight years, the “Accelerate State of DevOps Report” from Google’s DevOps Research and Assessment (DORA) team zooms in on software supply chain security.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Tenable
OCTOBER 14, 2022
14 | DevOps team culture is key for supply chain security | SecOps gets more challenging as attack surface expands | Weak credentials hurt cloud security | Incident responders grapple with stress | Security spending grows | And much more! . Topics that are top of mind for the week ending Oct.
Mike Roberts
JANUARY 21, 2019
Continuous Integration and Continuous Delivery (CI/CD) are techniques that I’ve had a passion about for a long time. Back in the Dim And Distant Past of 2003 I even co-led an open source project that brought some at-the-time interesting innovations to this area. First up some background / terminology.
Mike Roberts
JANUARY 21, 2019
Continuous Integration and Continuous Delivery (CI/CD) are techniques that I’ve had a passion about for a long time. Back in the Dim And Distant Past of 2003 I even co-led an open source project that brought some at-the-time interesting innovations to this area. First up some background / terminology.
Github
JULY 24, 2019
Snyk built a successful GitHub Marketplace app that adds additional vulnerability testing for open source dependencies. They also released their 2019 Open Source Security Report. Socializing and collaborating on each other’s source code is essential to how developers learn, communicate, and reinvent themselves.
CircleCI
MAY 19, 2022
Open source frameworks and libraries installed via package repositories like npm, NuGet, and Maven. Chunks of source code copied from other applications (or Stack Overflow). When any of these components presents a security flaw, the impact extends to all applications using the compromised component. Component version.
Expert insights. Personalized for you.
98 
Let's personalize your content