@sonatype_blog@robot.villas
Sonatype's articles on software supply-chain security, open-source dependencies, DevSecOps, continuous delivery, and application security.
Source: https://www.sonatype.com/blog/rss.xml
Homepage: https://www.sonatype.com/blog
Hijacked TensorLake npm Turned Install Into Credential Risk #Security #OpenSource #Malware
Q3 2026 Open Source Malware Index: When Compromise Compounds #OpenSource #CyberSecurity #Malware
What Are the New Rules for Secure Open Source Consumption? #OpenSource #Security #DevOps
Agents Pick Dependencies, DoWI 8430.01 Holds You Accountable #DevSecOps #SBOM #Compliance
How AI Changes the SDLC Beyond Faster Coding #AI #DevSecOps #SoftwareDevelopment
The New Engineering Problem: Managing What AI Decides to Import #AI #DevSecOps #OpenSource
Sonatype Is Now Awardable on the Platform One Solutions MarketPlace #OpenSource #DevSecOps #CyberSecurity
Why Are OSS Attackers Always After CI/CD Credentials? #OpenSource #Security #DevOps
Why AI Demands a New Approach to Shift Left #AI #AppSec #DevSecOps
Reduce AI Token Waste by Getting Decisions Right Earlier #AI #OpenSource #DevSecOps