Cyber Security

Responsible disclosure: the impact of vulnerability disclosure on open source security

VS Code extension: building auto CI/CD with GitHub Actions

This article discusses building a full CI/CD pipeline for a VS Code extension using GitHub Actions.

Yarn 2 — the future of package managers for JavaScript?

Yarn 2 is the new release of the revolutionary and well-established npm package manager Yarn which features improvements, such as Plug’n’Play, Plugins architecture, Monorepos, and improved workspaces support, Zero installs.

Vuln Cost: Effortless finding vulnerabilities in npm packages with VS Code

Do you know for all the packages you import if they contain known security vulnerabilities? The free, open source, Vuln Cost extension for VS Code can help you with this.

Snyk participates in Atlassian Remote Summit and limited-time Bitbucket Cloud promotion

A specially-created Atlassian, limited-time Bitbucket Cloud promotion bundles Snyk and other developer tools.

Vulnerable Gradle plugin-publish plugin reveals sensitive information

This post highlights the recently disclosed “Insertion of Sensitive Information” vulnerability, which affects Gradle’s plugin-publish plugin.

March in review: State of Open Source Security survey, All.The.Talks virtual conference, and more

Shifting responsibly left with the enhanced Snyk security gating on pull requests

Snyk’s enhanced security and license testing for pull requests helps developers incorporate security thinking into their daily workflows.

Secure development when working from home — tips and tricks

In this post, Snyk founder Guy Podjarny offers a few suggestions for ways you can adapt your security policies for a newly remote workforce.

Prisma 2.0 | Now in Beta: Type-safe Database Access with Prisma Client

Prisma 2 Beta introduced type-safe database access with Prisma Client, updated docs, and a clearer path toward production readiness.

Using UBI images to minimize container vulnerabilities

In this post, we discuss using Red Hat Universal Base Images in order to proactively protect your container images from vulnerabilities.