Keep Your Dependencies in Check
Explore tools and strategies for managing software dependencies, from package managers to automated bots, to keep your applications secure and up-to-date while delivering business value.
Complete Compliance Toolchain for Yocto Projects - Software Composition Analysis and SBOM Automation
Discover how to implement a comprehensive compliance toolchain for Yocto projects, featuring advanced tools like Fossology, Scancode, SPDX, and specialized solutions for managing large-scale software composition analysis.
Understanding Software Component Analysis (SCA) in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, demystifying their importance for protecting organizational assets and code integrity.
Mapping the Minefield of Open Source Software Risks - DevOps 2024
Explore open source software risks, vulnerabilities, and remediation strategies. Learn about software composition analysis, reachability, and semantic versioning for effective dependency management.
Prioritisation of SCA Findings in Software Dependencies Using Static Reachability Analysis
Explore static and reachability analyses for effective prioritization of software dependency vulnerabilities, enhancing security and productivity in development workflows.
Snyk Free DevSecOps Tools and Resources
Explore Snyk's free DevSecOps tools for identifying and addressing vulnerabilities in your code, regardless of programming language. Learn to enhance application security with powerful resources.
What's New in the World of SBOMs?
Explore recent developments in Software Bill of Materials (SBOMs) with industry experts, discussing advancements, challenges, and best practices in software supply chain security.
Application Security from Start to Finish
Comprehensive guide to integrating security throughout the development process, covering secure environments, dependency management, vulnerability scanning, and advanced testing techniques.
What Is Going On In Your Source Code? Understanding Software Component Analysis in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, understanding their importance in protecting organizations from emerging security threats.
Open Source Licensing in the Era of AI-Assisted Coding
Explore the intersection of AI-assisted coding and open source licensing, focusing on compliance challenges, risk management, and practical solutions for modern software development.
Proactively Auditing Open Source Dependencies for Security - Here Is a Clean Section of the Beach
Explore proactive auditing of open source dependencies, scaling challenges, and data handling in the Alpha-Omega project. Learn about efforts to enhance software security through systematic scanning and repair.
The Runtime Rodeo - Taming Open Source Image Behavior
Explore a new standard for creating behavioral fingerprints of open source images at runtime, enhancing cloud native security beyond traditional software supply chain measures.
Developing Secure Software with GitHub - Automated Security Checks and Tools
Learn to leverage GitHub for automated security checks, including static application security testing and software composition analysis, to enhance your application's security posture with minimal effort.
Actions in the Wild: Usability and Ease of Use of Open Source Security Tools
Discover how to implement and optimize open-source security tools in software development, focusing on vulnerability analysis, CVE scoring, and automated GitHub security actions.
ONAP's Recipe for Managing CVEs and Securing Open Source Software
Discover ONAP's effective strategies for managing CVEs, securing open-source dependencies, and implementing automated vulnerability management processes in software development.
GitHub for Fun, Profit, and Security
Master GitHub's advanced features for enhanced productivity, security, and efficient organization management through configuration-as-code solutions and best practices for access control.
Disrupting the Software Composition Analysis Market with Open Source Software and Open Data
Explore how SCANOSS challenges the Software Composition Analysis market through open-source strategies, market trends, and innovative approaches to SBOM adoption and emerging technologies.
Software Composition Analysis at Scale with Eclipse Apoapsis
Discover how to implement large-scale Software Composition Analysis using Eclipse Apoapsis, focusing on SBOM generation, vulnerability tracking, and license compliance through automated server-based solutions.
Hello World+ Projects to Test and Benchmark Software Composition Analysis Tools
Explore software composition analysis tools through Hello World+ projects, focusing on vulnerability detection, license compliance, and SBOM creation for diverse programming environments.
Enhancing Software Supply Chain Security: Approaches to Software Composition Analysis
Explore software composition analysis tools Eclipse Steady and OWASP Dependency-Check to enhance Java software supply chain security through vulnerability detection in third-party dependencies.
Black Hat Asia 2025
Black Hat Asia 2025