Endor Labs Forks Semgrep to Opengrep for Static Code Analysis
Software application development lifecycle (SDLC) analysis company Endor Labs has worked with a cadre of industry partners to now launch Opengrep, a toolset designed to ensure static software application code analysis remains open and accessible.
Five Trends That Will Drive Software Development in 2025
In 2025, developers will broaden the scope of how they use AI with promising new applications for reducing technical debt and improving security.
Report Surfaces DevSecOps Progress Despite Decline in Developer Training
An analysis of 121 organizations published this week by Black Duck Software finds a 67% increase in organizations performing software composition analysis (SCA) on code repositories and a 22% rise in the number of organizations creating software bills of materials.
DevOps Security Metrics
In this article, we explore key metrics that can help bridge the gap between the speed of DevOps processes and the essential security requirements needed to protect systems effectively.
Best of 2024: Securing the DevOps Pipeline: Tools and Best Practices
Because of the critical nature of the DevOps pipeline, security is becoming a top priority. Here’s how to integrate DevSecOps.
Sonar Acquires Tidelift to Extend DevSecOps Reach Into Open Source Software
Sonar today revealed it has agreed to acquire Tidelift to gain access to third-party open-source code that it plans to integrate into its static code analysis tools.
OpenText Allies With Secure Code Warrior to Improve Application Security
OpenText has partnered with Secure Code Warrior to make it simpler for application developers to learn best DevSecOps practices as needed.
AWS Adds Declarative Policies Capability to Reduce DevSecOps Friction
Amazon Web Services (AWS) this week added a declarative policies capability that promises to reduce the level of DevSecOps friction that far too many software engineering teams continue to encounter.
The Importance of Database Release Automation Platforms in the Era of Digital Transformation
The path to efficiency, security and confidence in database operations lies in leveraging advanced automation platforms.
How an Effective AppSec Program Shifts Your Teams From Fixing to Building
Development teams are under growing pressure to build cutting-edge applications with shorter development lifecycles. However, they are often slowed down by the growing burden of fixing security vulnerabilities. Ineffective application security processes mean these teams can spend more time firefighting than building, diverting focus from their primary objective: Delivering innovative, high-performance software. Yet, healthy security […]
Microsoft Enlists Endor Labs to Integrate SCA Tool with CNAPP
Microsoft has tapped Endor Labs to incorporate a software composition analysis (SCA) tool into its cloud-native application protection platform (CNAPP).
Four Steps to Balance Agility and Security in DevSecOps
Balancing agility and security in DevSecOps is achievable with the right mix of automation, collaboration and continuous feedback. By embedding security into agile processes, organizations can deliver software that is both fast and secure, meeting the demands of today’s fast-paced tech environment.
Update to Open Source WhiteRabbitNeo Project Brings Smarter AI to DevSecOps
Kindo today revealed that WhiteRabbitNeo, an open-source DevSecOps platform, has been updated to take advantage of improved large language models (LLMs) that generate more accurate outputs when resolving prompts related to offensive cybersecurity, surfacing remediations for potential threats and integrating threat intelligence and vulnerability data.
AI Will Soon Automate DevSecOps Governance
The role cybersecurity teams play in ensuring applications are secure is about to become a lot more proactive in the age of artificial intelligence (AI).
Prime Security to Apply AI Guardrails to DevSecOps Workflows
Prime Security today emerged from stealth to make available a beta version of a platform that leverages artificial intelligence (AI) to ensure the appropriate guardrails are being followed as software is developed.
Survey Surfaces Steady Gains in DevSecOps Adoption
A survey of more than 500 DevOps practitioners finds less than half (47%) of respondents work for organizations that regularly employ best DevSecOps practices. Conducted by Techstrong Research, an arm of the TechStrong Group, which is also the parent organization of DevOps.com, the survey additionally finds 54% of respondents regularly practice code scanning for vulnerabilities […]
Embracing DevSecOps: The Future of Secure Software Delivery
Register now for the OpenText DevSecOps Virtual Summit 2024 on Sept. 24 and step toward revolutionizing your software delivery process.
Leading the Charge: C-Suite’s Role in Cultivating DevOps and DevSecOps Culture
As the digital frontier evolves, it is becoming imperative for C-suite executives to cultivate a robust DevOps and DevSecOps culture.
Research on the Human/Machine Frontier: Unleashing Generative AI in Software Engineering
GAI is poised to revolutionize software engineering. Having diverse perspectives and insights from across the many roles of the SDLC is crucial to understanding the evolving landscape.
Changing the Face of Software Development Security: CodeOps
CodeOps and GenAI are aligned: CodeOps treats code produced using GenAI as yet another source of code and focuses on solving the security and discoverability problems inherent in the reuse of existing assets.
Breaking Free from Ransomware: Securing Your CI/CD Against RaaS
For developers, few things are more precious than their codebase. Yet, a chilling trend is emerging: Ransomware-as-a-service (RaaS) attacks targeting CI/CD pipelines, holding valuable code hostage.
AppSec Teams, DevOps Teams Facing Security Strain
https://devops.com/appsec-in-the-cloud-what-devops-teams-should-know/
DevSecOps: Integrating Security Into the DevOps Lifecycle
DevSecOps isn’t just ticking boxes; it is about weaving security into the fabric of software creation from start to finish, which not only tightens protection but also speeds things up and keeps us on the right side of regulations.