Tag: CI/CD
- 
		
		
		Anchore: False Positives and False Negatives in Vulnerability Scanning: Lessons from the TrenchesSource URL: https://anchore.com/blog/false-positives-and-false-negatives-in-vulnerability-scanning/ Source: Anchore Title: False Positives and False Negatives in Vulnerability Scanning: Lessons from the Trenches Feedly Summary: When Good Scanners Flag Bad Results Imagine this: Friday afternoon, your deployment pipeline runs smoothly, tests pass, and you’re ready to push that new release to production. Then suddenly: BEEP BEEP BEEP – your vulnerability… 
- 
		
		
		Anchore: Anchore Extends Best-in-Class Container Security Offering with Bring Your Own SBOM SupportSource URL: https://anchore.com/news/anchore-releases-bring-your-own-sbom/ Source: Anchore Title: Anchore Extends Best-in-Class Container Security Offering with Bring Your Own SBOM Support Feedly Summary: Anchore Enterprise is a powerful, cost-effective, and compliant management, monitoring, and automation tool for understanding and securing complex software supply chains. SANTA BARBARA, CA – May 21, 2025 – Anchore, the market leader in software… 
- 
		
		
		Scott Logic: An SBOM primer with some practical insightsSource URL: https://blog.scottlogic.com/2025/05/16/sbom-primer-practical-insights.html Source: Scott Logic Title: An SBOM primer with some practical insights Feedly Summary: We’ve been generating Software Bills of Materials (SBOMs) on client projects for several years now, and we’d like to share insights into the positive impact they’ve had on security, resilience and engineering quality, along with some considerations to bear… 
- 
		
		
		AWS News Blog: Accelerate CI/CD pipelines with the new AWS CodeBuild Docker Server capabilitySource URL: https://aws.amazon.com/blogs/aws/accelerate-ci-cd-pipelines-with-the-new-aws-codebuild-docker-server-capability/ Source: AWS News Blog Title: Accelerate CI/CD pipelines with the new AWS CodeBuild Docker Server capability Feedly Summary: AWS CodeBuild now offers Docker Server capability, enabling a dedicated and persistent Docker server within projects that dramatically reduces build times by maintaining a centralized cache, as demonstrated by a 98% reduction in build…