Open Source Beat

Screenshot of GitLab's dependency scanning interface highlighting a vulnerable component.

GitLab 19.0 Adds SBOM Scanning [New Feature]

Half of AI-generated code has vulnerabilities. GitLab's new SBOM scanning in 19.0 promises to untangle that mess. But does it really address the core issue, or just add another layer of corporate-speak?

5 min read an hour ago

Conceptual image showing a digital stream of code being filtered, with clear, focused code emerging on the other side.

Security & Privacy

Docker & Black Duck: Taming Container Chaos [Precision Security]

We've all been buried under a mountain of vulnerability alerts, most of them completely irrelevant. Now, Docker and Black Duck are here to surgically slice through that noise.

3 min read 3 weeks, 4 days ago

Security & Privacy

Open Source Supply Chain Security: SBOMs, Sigstore, and SLSA Explained

A comprehensive guide to securing the open source software supply chain, covering SBOMs for transparency, Sigstore for signing, and SLSA for build integrity.

6 min read 5 months, 1 week ago

#sbom

GitLab 19.0 Adds SBOM Scanning [New Feature]

Docker & Black Duck: Taming Container Chaos [Precision Security]

Open Source Supply Chain Security: SBOMs, Sigstore, and SLSA Explained