| Date | Title | Description |
| Sign up to see | Sign up to see | Sign up to see |
| Dec 24, 2024 | CodeGate Protects The Privacy Of Developers That Use AI Coding Assistants | New open source project from the creators of Kubernetes and Sigstore prevents secrets leakage and protects code from risky dependencies
More than 90% of developers now use AI coding assistants—the primary motivator is the potential to produ... |
| Nov 21, 2024 | Книга: «Прозрачное программное обеспечение: Безопасность цепочек поставок ПО» | Привет, Хаброжители!
Мы живем во времена, когда программное обеспечение затрагивает все аспекты нашего общества. Оно применяется повсюду, начиная с критических инфраструктур и цифровой коммерции и заканчивая национальной безопасностью. Тем ... |
| Nov 15, 2024 | Securing the Code: A New Era in Package Authentication and Secret Management | In the digital landscape, security is paramount. Two recent developments highlight the ongoing battle against vulnerabilities in software development: the introduction of digital attestation in Python Package Index (PyPI) and the proactive ... |
| Nov 15, 2024 | В PyPI внедрили поддержку механизма цифровой аттестации для проверки подлинности опубликованных пакетов | 14 ноября 2024 года разработчики репозитория Python-пакетов PyPI сообщили о внедрении поддержки механизма цифровой аттестации для проверки подлинности опубликованных пакетов.
Это проверка пришла на смену верификации с использованием PGP-под... |
| Sep 16, 2023 | Зачем нам Kyverno? | Kyverno — это механизм политики с открытым исходным кодом для Kubernetes , который позволяет вам определять, проверять и применять политики для вашего кластера.
Он прост в использовании и гибок , позволяя определять политики с помощью прост... |
| Aug 18, 2023 | Снижаем риски атак на цепочки поставок с помощью Sigstore | Привет!
Меня зовут Руслан Качмазов, я стажёр-инженер Yandex Cloud Security, занимаюсь детектированием инцидентов. Вместе с коллегами Алибеком Епхиевым и Дмитрием Пикушем, выпускниками Школы ИБ Яндекса 2023 года, мы расскажем об атаках на це... |
| Jun 8, 2023 | Supply Chain Security: Chainloop. краткий обзор решения | Привет! Меня зовут Михаил Черешнев, я работаю в компании Swordfish Security, где занимаюсь вопросами внедрения DevSecOps. Сегодня мы в команде много внимания уделяем направлению Software supply chain security. Если заглянуть в Рунет, можно ... |
| May 17, 2023 | Kubernetes and sigstore founders raise $17.5M to launch software supply chain startup Stacklok | After being instrumental in launching the Kubernetes open source project, Kubernetes co-founders Craig McLuckie and Joe Beda left Google to launch Heptio in 2016. They then sold the company to VMware in 2018. Both left VMware in 2022 and Mc... |
| Nov 29, 2022 | Software supply chain security is broader than SolarWinds and Log4J | Dan Lorenc Contributor
Share on Twitter
Dan Lorenc is CEO and co-founder of Chainguard. Previously he was staff software engineer and lead for Google’s Open Source Security Team (GOSST). He has founded projects like Minikube, Skaffold, Tekt... |
| Oct 26, 2022 | Sigstore launches free software signing and verification service for open source projects | Software supply chain quickly became a hot topic in the last few years, especially as the number of high-profile attacks increased and the White House got involved. Sigstore, an open source project supported by the likes of Google, GitHub, ... |
| Oct 25, 2022 | Free digital signing service aims to bolster software supply chain security | Register now for your free virtual pass to the Low-Code/No-Code Summit this November 9. Hear from executives from Service Now, Credit Karma, Stitch Fix, Appian, and more. Learn more.
The bulk of code in today’s modern software artifacts is ... |
| Sep 22, 2022 | Software supply chain security gets its first Linux distro, Wolfi | Image: Ralf/Adobe Stock
From software signing, to container images, to a new Linux distro, an emerging OSS stack is giving developers guardrails for managing the integrity of build systems and software artifacts.
SolarWinds and Log4j were t... |
| Aug 18, 2022 | Don’t leave open source open to vulnerabilities | Were you unable to attend Transform 2022? Check out all of the summit sessions in our on-demand library now! Watch here.
Open-source software has become the foundation of the digital economy: Estimates are that it constitutes 70 to 90% of a... |
| Aug 9, 2022 | 10 malicious Python packages exposed in latest repository attack | Enlarge / Supply-chain attacks, like the latest PyPi discovery, insert malicious code into seemingly functional software packages used by developers. They're becoming increasingly common.
Getty Images reader comments 40 with 32 posters... |
| Aug 8, 2022 | Slim.AI Expands Advisory Board, Adding Voices Representing Both Developers and Security Professionals | We recognize that there are challenges at each level of the software supply chain, and so we’re building a team of advisors that bring top-notch expertise to the table so the use of Slim.AI is seen as an industry best practice.
LAS VEGAS (P... |
| Jun 2, 2022 | Chainguard raises $50M to guard supply chains | Chainguard, a startup that focuses on securing software supply chains, announced today that it has raised a $50 million Series A funding round led by Sequoia Capital. Amplify, the Chainsmokers’ Mantis VC, LiveOak Venture Partners, Banana Ca... |
| May 8, 2022 | Log4j and why it's not safe to relax yet [Q&A] | The Log4j vulnerability first hit the headlines in December last year. Since then we've heard less about it, but it hasn't gone away, like most vulnerabilities it has a long tail.
A recent report from the Cybersecurity Safety Revi... |
| Apr 19, 2022 | Kubernetes 1.24: обзор нововведений | Этой ночью представят новую версию Kubernetes. Удаление Dockershim — если не самое значимое, то уж точно самое обсуждаемое изменение в релизе 1.24. Также среди интересных нововведений: «мониторинг здоровья» томов; Network Policy Status для ... |
| Mar 20, 2022 | The risk of undermanaged open source software | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
There are a lot of myths surrounding open source ... |
| Mar 20, 2022 | The risk of undermanaged open source software | Did you miss a session at the Data Summit? Watch On-Demand Here.
There are a lot of myths surrounding open source software, but one that continues to permeate conversations is that open source is not as secure as proprietary offerings. At f... |
| Jan 28, 2022 | Computing and data infrastructure in '22 | At the beginning of last year, I shared a series of investment themes that were top-of-mind in an effort to share my thinking and seek feedback. I was pleasantly surprised by the response, which motivated me to share again this year. As the... |
| Jul 22, 2021 | Tracking The Trail Of Software: The Key To Boosting Security | Don’t fall prey to cyberattacks. Secure your software trail. |
| Mar 11, 2021 | Linux Foundation quer deixar projetos open source mais seguros com Sigstore | A Linux Foundation, em parceria com organizações como Red Hat e Google, colocou em operação o Sigstore, serviço sem fins lucrativos que permite que desenvolvedores assinem e verifiquem softwares de código aberto. Essa medida pode evitar um ... |
| Mar 11, 2021 | A new Linux Foundation open source signing tool could make secure software supply chains universal | The Linux Foundation, in partnership with Red Hat, Google and Purdue University, has announced a new digital signing project, potentially eliminating many of the headaches that come with securing open source software, files, images and bina... |
| Mar 9, 2021 | Linux Foundation launches free service to verify software authenticity | The Linux Foundation, the non-profit organization enabling innovation through open source, has announced a new service to improve the security of the software supply chain by enabling the easy adoption of cryptographic software signing.
Cal... |
