Today’s release of Black Duck adds vulnerability impact analysis, which indicates whether your application executes vulnerable code. Let’s look at how this addition further augments your prioritization efforts.
Posted in Application Security, Software Composition Analysis (SCA)
Get started with the Dockerized Black Duck installation. This post outlines workplace specifications, tools, and steps for installing Black Duck.
Posted in Software Composition Analysis (SCA)
Open source license noncompliance can have severe implications. Here are four advanced license compliance features that help protect your proprietary code.
Posted in Software Composition Analysis (SCA)
The NVD is a good source for open source vulnerability data. But with an average 27-day reporting delay, it shouldn’t be your only source of information.
Posted in Open Source Security, Software Composition Analysis (SCA)
Learn how vulnerability reports can help you fix critical vulnerabilities effectively, and the essentials of application security for DevOps and CI/CD.
Posted in Agile, CI/CD & DevOps, Open Source Security, Software Composition Analysis (SCA), Software Security Program, Webinars
If you use an SCA tool, why should you use a SAST tool as well? Let’s discuss what each tool can and can’t do and how they complement each other.
Posted in Application Security, Software Composition Analysis (SCA), Static Analysis (SAST)
Learn how to combine SAST and SCA to find and fix more security and quality issues, and how managed pen testing supports your risk management strategy.
Posted in Software Composition Analysis (SCA), Software Security Program, Static Analysis (SAST), Webinars
With applications containing more and more open source, and 40+ vulnerabilities disclosed daily, how do you prioritize your remediation efforts?
Posted in Application Security, Open Source Security, Software Composition Analysis (SCA)
Modern software is a bit like manufacturing: gluing open source components together using proprietary code and tracking everything with a bill of materials.
Posted in Open Source Security, Software Composition Analysis (SCA)
With advanced policy management and best-in-class vulnerability reports, developers can fix the most critical vulnerabilities quickly and effectively.
Posted in Open Source Security, Software Composition Analysis (SCA), Webinars