SBOMs are just a means to an end
Software has eaten the world. Modern society is dependent on software for everything from communicating with family to the medical devices keeping our loved ones alive. But do you know what goes into that software? If your answer was sticky tape and glue you clearly work in technology. Congratulations, this article is for you.
Introducing the OpenSSF Scorecard API
The Scorecard API makes it easier to automate and enforce your dependency policies. Naveen is one of the key contributors to the Scorecard projects, in this article, he walks through how it works!
Why I joined Endor Labs to Build our India Team
Sriram Subramanian recently left his position as VP of Engineering at Citrix to lead the India R&D center at Endor Labs. We asked him what made him take the leap and what's his vision for the India team.
How Zero Trust principles can accelerate open source adoption in enterprises
Open source is a huge boost to productivity, and today we trust it implicitly even if we think we don’t. That comes with a lot of risk, a lot of friction, and doesn’t let us make the most out of open source software. Zero Trust principles can help us get open source adoption to its full potential.
What security teams need to know about software development
This article is meant to help security teams begin their threat models and make more informed risk management decisions regarding their software development practices.
The response is as dangerous as the vulnerability - Thoughts on the CSRB Log4j report
The recent report from the CSRB gives a step by step account of Log4j, from discovery to remediation, and uncovers a painful insight - sometimes the response is just as dangerous as the vulnerability.