Smart organizations in the business of building software need to use a mix of application testing tools to ensure their code is high-quality and secure.
Posted in Open Source Security, Software Composition Analysis (SCA) | Comments Off on JDA Software: Extending their SDLC to remediate open source issues
Learn about the top open source licenses used by developers, including the 20 most popular open source licenses, and their legal risk categories.
Posted in Open Source Security, Software Composition Analysis (SCA) | Comments Off on Top open source licenses and legal risk for developers
What sets Black Duck apart from other SCA solutions? Industry-leading innovation, extensive vulnerability detection, and a broad range of integrations.
Posted in Open Source Security, Software Composition Analysis (SCA) | Comments Off on Top 3 reasons to choose Black Duck
Unless you build your own AppSec tools, you need to know how to choose an application security vendor and whether to opt for individual tools or a suite.
Posted in Interactive Application Security Testing (IAST), Software Composition Analysis (SCA) | Comments Off on How to choose application security vendors and tools
To support the launch of Binary Authorization, we’re releasing Black Duck for Google Cloud Build to help ensure your images are free of policy violations.
Posted in Container Security, News & Announcements, Open Source Security, Software Composition Analysis (SCA) | Comments Off on Introducing Black Duck for Google Cloud Build
The Black Duck Jira Cloud integration is based on a flexible, customizable model, backed by the same exemplary Black Duck software composition product.
Posted in News & Announcements, Open Source Security, Software Composition Analysis (SCA) | Comments Off on Introducing the Black Duck Jira Cloud integration
How should you track open source? It’s almost definitely in your codebase, so the question is not whether to track it but what could happen if you don’t.
Posted in Open Source Security, Software Composition Analysis (SCA) | Comments Off on You’re using open source software, and you need to keep track of it
Technical due diligence on the target’s SDLC is a must for acquirers in software M&A. What you don’t know about their process and tools could hurt you.
Posted in Mergers & Acquisitions, Open Source Security, Software Composition Analysis (SCA) | Comments Off on Technology company M&A: Do due diligence on SDLC process/tools
Black Duck is among platforms that lead the pack, cited for “very strong policy management and SDLC integrations and strong proactive vulnerability management.”
Posted in News & Announcements, Open Source Security, Software Composition Analysis (SCA) | Comments Off on Forrester recognizes Synopsys as a leader in software composition analysis
SCA tools are an essential part of your AppSec toolkit, because free and open source software—just like free puppies—comes with hidden costs and risks.
Posted in Agile, CI/CD & DevOps, Open Source Security, Software Composition Analysis (SCA) | Comments Off on The hidden costs and risks of free puppies (and open source)
