DAST vs SAST in Secure Software Development Lifecycles
SAST and DAST catch different vulnerabilities at different stages, so secure development needs both.
Dana Kovac
Section
Software Supply Chain Security
8 stories in Software Supply Chain Security.
FISMA Software Supply Chain Controls for Federal DevOps Teams
FISMA supply chain controls now scrutinize DevOps pipelines annually.
Kwame Bauer
SBOM Generation and Embedding in CI/CD Pipelines
Regulators now demand automated SBOMs embedded throughout CI/CD pipelines, not one-time artifacts.
Kwame Bauer
NIST Guidance on Software Supply Chain Security
Understanding which NIST document applies to your team prevents compliance gaps.
Kwame Bauer
SLSA Framework Levels and What They Require in Practice
Organizations can now demonstrate their software was built securely and hasn't been tampered with.
Elise Cho
Software Supply Chain Attacks in the Wild
Attacks doubled in pace since April, exposing structural weaknesses in software dependencies.
Kwame Bauer
SLSA Framework Adoption in CI/CD Pipelines
Google's production-tested framework brings supply chain integrity to modern CI/CD pipelines.
Kwame Bauer
Software Supply Chain Attacks Targeting DevOps Toolchains
Self-replicating malware and compromised maintainers are turning registries into weapons.
Kwame Bauer