4276 articles
4276 ARTICLES
This report sheds light on the current security posture of open source software and reflects on security concerns, trends in vulnerabilities across packages and container images, and also examines the practices employed by maintainers and organizations in securing their software.
Welcome to the newest Snyk blog series! In this monthly series, Snyk looks back on the vulnerabilities discovered by or reported to our research team. We choose one noteworthy vulnerability from the past month and tell the story behind the discovery, research, and disclosure of the vulnerability. We highlight the researchers, developers, and users who are helping identify and remediate vulnerabilities across the open source community.
DevOps Enterprise Summit London - Virtual is our first virtual event, and we’ve all been studying online events for months, trying to understand what makes the great ones great, and why the worst ones make you feel like you’re stuck on the worst, multiple-day video conference call ever.
Welcome back to the second part of how to work with git, the easy way! In this part, we will go over four more common scenarios and some conclusions.
When developing REST API projects or CLI Applications with Node.js, it is very common to use the open source npm dependency package manager to include frameworks and tools in these projects. To a certain extent, this is beneficial as it can help us reduce development time. Including stable packages that are well tested and maintained by the community, serves certain needs for our project. However, it can also turn against us and be a problem.
On Tuesday, June 16 from 10-11 am PT, three hands-on experts from AWS, CircleCI, and Snyk will host “The DevSecOps Journey Webinar” to demo how CircleCI and Snyk seamlessly port with you as you increasingly develop in the cloud.
This post digs into the options of the git rebase interactive command and that you can use to “rewrite your history.”
Prisma 2 introduced a type-safe database client and declarative migrations to make working with databases in Node.js and TypeScript faster and more reliable.
We are excited to announce that we power the security badge in JSDelivr.com!
In the face of systemic injustice arcing towards a specific community, we must have the courage to call it out specifically.
We’re excited to share that we’ve expanded our collaboration with Atlassian and have enhanced Snyk’s integration with Bitbucket Cloud.