4276 articles
4276 ARTICLES
Prisma ORM 7.3.0 adds a new compilerBuild option (fast or small), speeds up raw queries by bypassing compilation, improves MSSQL and better-sqlite3 stability, reverts mapped enum behavior, and preserves BigInt precision in relationJoins JSON aggregation.
The Wiz JetBrains IDE plugin is now generally available, enabling developers to fix risks before code leaves their local environment.
Our latest report highlights the urgent need for machine-speed defense as AI shifts from a tool to an autonomous actor in the face of automated cyberattacks. Learn the key strategies for leaders to bridge the visibility gap and implement technical governance in the age of AI agents.
Learn how Chainguard helps DevOps teams meet SOC 2 requirements with secure-by-default containers, automated SBOMs, and continuous, audit-ready evidence.
Gastown hints at the future of software: agent-driven workflows where CI, guardrails, and shared truth matter more than writing code faster.
Learn how Chainguard helps financial institutions meet NYDFS 500 with zero-CVE open source, signed SBOMs, auditable evidence, and vulnerability remediation.
Discover how you can run Renovate as a GitHub Action without needing a GitHub Personal Access Token by using Octo STS.
Are agentic browsers the new Flash? A 2025 review of new attacks, vendor security layers, and a roadmap for navigating AI browser risks.
Wiz Research discovered a critical supply chain vulnerability that abused a CodeBuild misconfiguration to take over key AWS GitHub repositories - including the JavaScript SDK powering the AWS Console.
We added 10 open source projects to EmeritOSS—including MinIO, Prometheus exporters, and PgCat—to provide long-term, stability-focused maintenance and security.
New integrated authentication for Python Libraries with a keyring: use short-lived credentials for pip installs to stay secure without slowing developers down.
Chainguard CEO Dan Lorenc explains why real security comes from trusted, from-source software supply chains, not post-hoc hardening or zero-CVE promises.