May 8, 2019Top 5 Open Source Vulnerabilities for April 2019April showers may bring May flowers, but they also bring with them some real doozies when it comes to open source vulnerabilities. Spring is in the air, but our hard-working knowledge team at WhiteSource is still at it, seeking out the open source vulnerabilities that the public needs to know…Kubernetes6 min read
May 7, 2019Top 7 Tools and Tips for Improving Your DevOps PipelineNearly two decades after the turn of the millennium, software has an impact on nearly all aspects of our lives. We use apps for learning, finding love, commerce, entertainment, and pretty much every other part of how we go about the world. Driving this steady stream of software is the…Continuous Integration8 min read
May 2, 2019Docker Container Security: Challenges and Best PracticesDocker’s massive adoption rates in recent years have made container security a critical consideration for organizations that use containers for development or production. …Docker6 min read
Apr 30, 2019HyperLedger — WhiteSource’s Open Source Project of the Month for April 2019Continuing our series of innovative and useful open source projects that you should know, we spoke this month with Hyperledger’s Director of Ecosystem to learn more about their project. First released in December 2015 by the Linux Foundation under the Apache License 2.0, Hyperledger is an open source environment for…Blockchain4 min read
Apr 25, 2019The Results for 2019 are in: Here are the Key Takeaways from Stack Overflow’s Developer SurveyWith the publication of the annual Stack Overflow Developer Survey earlier this month, the developer community has gained important insights into how the community gets work done. The survey dug into which tools developers are using the most, the industries they work in, and most intriguing, how they got to…Programming5 min read
Apr 18, 2019Docker Image Security Scanning: What It Can and Can’t DoDocker image security scanning should be a core part of your Docker security strategy. Although image scanning won’t protect you from all possible security vulnerabilities, it’s the primary means of defense against security flaws or insecure code within container images. It’s therefore a foundational part of overall Docker security. In…Docker5 min read
Apr 11, 2019Everything You Wanted to Know About Open Source Attribution ReportsOpen source components are a major part of the software products that we create and use. Along with the many advantages that using open source projects brings to software development organizations, it also comes with obligations and added responsibilities. One of these requirements is open source licensing compliance. This is…Open Source4 min read
Apr 10, 2019Security that Doesn’t Slow You DownAs a product manager at WhiteSource, I see many customers who are facing different challenges with open source security. From the very basic issues, like knowing what they are actually using in terms of open source libraries, all the way to licensing and distribution, and of course, security. …Security4 min read
Apr 4, 2019Top 5 New Open Source Security Vulnerabilities in March 2019We all sprang forward with daylight savings this past March, losing an hour of sleep and hopefully giving spring a much-needed nudge. …Security7 min read
Apr 3, 2019Kubernetes Pod Security Policy Best PracticesIn Kubernetes, pod security policies are a powerful tool for mitigating security risks and enforcing secure configurations within your Kubernetes environment. However, using Kubernetes pod security policies to maximum effect takes some effort. …Kubernetes5 min read
