Tag: open source

open source, software, security, open-source, Lineaje, Linux, open source, report, study, Open source code

Report Shines Spotlight on Open Source Software Security Challenges

Mike Vizard | December 10, 2024 | open source, software security, supply chain

An analysis of more than five million open-source software packages published by Lineaje, a provider of a platform for tracking open-source software components, finds 95% of security issues involve some type of ...

Code Busters: Are Ghost Engineers Haunting DevOps Productivity?

Adrian Bridgwater | December 6, 2024 | application development, automation, CI/CD, developers, devops, devops culture, open source, software development

A study coming out of Stanford University conducted by software engineering productivity specialist Yegor Denisov-Blanch claims that developer teams are rife with so-called ghost engineers who do virtually no work ...

DevSecOps, appsec, ai, open-source, Sonatype, AppSec , devsecops, Traceable supply chain

Sonatype Report Surfaces Software Supply Chain Security Challenges

Mike Vizard | October 10, 2024 | appsec, open source, vulnerabilities

Sonatype today during a virtual All-Day DevOps (ADD) event shared the results of a report that finds there has been a 156% increase in the number of malicious open source packages year-over-year, ...

Survey Finds Compensation Drives Better Open Source Software Security Behavior

Mike Vizard | September 27, 2024 | compensation, maintainers, open source

A survey of 400 maintainers of open-source software projects suggests IT organizations should be paying a lot more attention to the degree to which the stewards of these projects are compensated before ...

GitHub Steers Copilot Autofix Into Eye of AI Security Storm

Adrian Bridgwater | August 20, 2024 | ai, github, open source, security

GitHub has come forward with its new Copilot Autofix tool. This AI-driven software service is targeted at developers who need to address software vulnerabilities in code destined for traditional applications and inside ...

Endor Labs Adds Analytics and Patching Tools to Secure Open Source Software

Mike Vizard | August 7, 2024 | Black Hat 2024, devops, open source, patches, patching tools, Software Supply Chain

Endor Labs today at the Black Hat USA 2024 conference revealed it has added an ability to determine how challenging it might prove to be to upgrade an open source software package, ...

Survey Finds Speed of Software Deployment Outpacing Security

Mike Vizard | August 1, 2024 | application development, continuous delivery, developers, development, devops, devsecops, open source, security

A survey of 5,315 individual contributors and leaders in development, IT operations and security finds two-thirds (66%) are releasing software faster than they were a year ago ...

OpenTelemetry and AI, observability, CNCF, eBPF, OTel, opensource, opentelemetry, mobile, observability, AI, New Relic Mezmo AI Cisco Datadog SPIRE observability OpenTelemetryLFN open source

The Future of Observability: How OpenTelemetry is Shaping IT Operations in the Age of AI

Jeff Stewart | July 11, 2024 | Advanced Applications, it ops, observability, open source, OpenTelemetry

OpenTelemetry (OTel) is going to do for IT operations what open-source software originally did for application development ...

observability, IT, Quesma, developers, Go, opentelemetry, observability, Splunk, observability, DevOps, Datadog, tools, tool, AI, vFunction, OpenTelemetry, observability, platforms, monitoring, Dora Metrics, DevOps, observability, SRE, challenges, data, data-driven, smart-driven, culture, pipeline, Observability, organizations, Data, - IBM - GitLab - APM - application performance - Instant

How to Migrate an Observability Platform to Open-Source and Cut Costs

Hemant Sachdeva | July 9, 2024 | application architecture, observability, open source

Migrating to an open-source stack is a better solution as it gives you control over telemetry data and reduces observability costs, despite challenges with existing service provider commitments ...

integration, software, investment, system, productivity, developer, development, software, system, Agile, and, IDP, practices, DevOps, open-source, CVE, Software, in-house development IDP developer, experience, software DevOps jobs secrets Libbpf BCC BPF kernel developer citizen secure software

Open-Source Software Community Riled by Yet Another CVE

Mike Vizard | July 2, 2024 | CVE, devsecops, JavaScript, open source

Another maintainer of an open-source software project has decided to no longer actively update IP address parsing utilities used widely by JavaScript developers ...

mobile apps, Tricentis mobile apps toil software mobile app stability bug

Embrace Extends Mobile App Alliance with Grafana Labs

Mike Vizard | June 14, 2024 | APIs, apps, Embrace, mobile apps, observability, open source

Grafana Labs and Embrace, a provider of a platform for troubleshooting mobile applications, this week extended their alliance to include integration with Grafana Cloud ...