Sonatype offers developers free security scan tool on GitHub

guest · Aug 14, 2018

Sonatype offers developers free security scan tool on GitHub
August 14, 2018
https://techcrunch.com/2018/08/14/s...n-source-vulnerability-scans-to-github-users/

Sonatype helps enterprises identify and remediate vulnerabilities in open source library dependencies and release more secure code. Today, they announced a free tool called DepShield that offers a basic level of protection for GitHub developers.

The product is actually two parts. For starters, Sonatype has a database of open source dependency vulnerabilities called OSS Index. The company gathers this information from a variety of public sources, says Sonatype CEO Wayne Jackson. [...]
After a developer installs DepShield, it checks a code commit in GitHub against the known vulnerabilities in the OSS Index with recommendations on how to proceed.

“What DepShield and OSS Index are doing is allowing the developers at the front lines to be able to see what’s happening inside their applications and fix the vulnerabilities directly,” Jackson said.

DepShield is available starting today in the Security section of the GitHub Marketplace and developers can download and install it for free.
Click to expand...

Log in or Sign up

Sonatype offers developers free security scan tool on GitHub

guest Guest

Log in or Sign up

Sonatype offers developers free security scan tool on GitHub

guest Guest

Useful Searches