2432 articles
A critical security exploit in the popular GitHub Action changed-files (tj-actions/changed-files) exposed encrypted secrets in plaintext within GitHub Action logs. This vulnerability, affecting over 23,000 repositories, was enabled by orphaned commits and manipulated release tags. Learn how to protect your GitHub workflows from similar exploits.
Chainguard’s defense in depth approach to security helped protect it from the recent tj-actions/changed-files GitHub repository compromise. Learn more about how.
Learn how to manage AI risks effectively with best practices, frameworks, and strategies to ensure secure AI adoption while mitigating vulnerabilities.
Discover best practices for responding to security alerts and remediating vulnerabilities early, reducing security toil, and improving DevSecOps efficiency.
Chainguard Assemble 2025 will take place in San Francisco on March 25. Take a deep dive into all the topics that sessions at the event will cover.
Learn how to optimize vulnerability management with ServiceNow Vulnerability Assignment rules and Snyk’s AppVR integration. Automate workflows, improve security visibility and reduce risks. Explore real-world examples and enhance your application security strategy.
Discover how Snyk helps secure the open source Golang project Bento by contributing vulnerability fixes and leveraging AI-powered tools. Learn about our efforts to enhance Bento’s security and support open source maintainers through the Snyk Secure Developer Program.
AI code generation accelerates development, enhances productivity, and reduces coding fatigue. However, it also introduces security risks and challenges. Learn how AI-powered coding works, its benefits and limitations, and how to secure AI-generated code using Snyk’s security tools.
Learn about the principles of DevSecOps automation, how to implement a DevSecOps automation strategy, & the best DevSecOps tools.
The traditional “distro” model of open source software delivery is ready for innovation. Learn how we got to this point and what comes next.
To enhance standardization and compatibility with modern Linux applications and other major distributions, Chainguard is adopting the usrmerge filesystem layout.
Snyk Learn, our developer security education platform, now includes lessons on API security! Check out the new learning path that covers the OWASP Top 10 for API security risks.