Open source software has its perks, but supply chain risks can't be ignored
Open source components play an increasingly central role in the software development scene, proving to be a boon in a time of continuous integration and deployment, DevOps, and daily software updates.
last year from VMware found that concerns about OSS included having to rely on a community to patch vulnerabilities, and the security risks that come with that. The trend toward using OSS packages isn't new. Developers have been doing it for a dozen years or more, according to Brian Fox, co-founder and CTO at software supply chain management vendor Sonatype and a member of the OpenSSF governing board.. This way, open source becomes the foundation of the software.
"It's a simple component way down [in the software] and it was so popular you can basically stipulate it exists in every Java application – and you would be right 99.99 percent of the time," he said."As an attacker … you're going to focus on those types of things.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Popular restaurant chain to open a new venue in Glasgow AirportThe move is expected to create 10 jobs and will serve passengers from 4am until the evening hours.
Read more »
Plans by McDonald's should see Oswestry restaurant soon openThe restaurant and takeaway is set to be built on part of the former Smithfield livestock market site off Shrewsbury Road.
Read more »
Diablo 4 beta dates announced for March - includes Early Access and Open BetaEverything we know so far about Diablo 4's upcoming open beta and early access beta, arriving this March for consoles and PC.
Read more »
Police hunt man over Edinburgh train upskirting incidentA woman discovered the man holding his phone under the table with the camera app open.
Read more »
Honda's 2023 F1 reliability fixes to open up Red Bull strategic optionsHonda believes that the reliability improvements it has made to its F1 engine will 'help with giving more options from a strategic perspective' for Red Bull and AlphaTauri this season ⬇️
Read more »