Tag: CI/CD
-
Anchore: False Positives and False Negatives in Vulnerability Scanning: Lessons from the Trenches
Source URL: https://anchore.com/blog/false-positives-and-false-negatives-in-vulnerability-scanning/ Source: Anchore Title: False Positives and False Negatives in Vulnerability Scanning: Lessons from the Trenches Feedly Summary: When Good Scanners Flag Bad Results Imagine this: Friday afternoon, your deployment pipeline runs smoothly, tests pass, and you’re ready to push that new release to production. Then suddenly: BEEP BEEP BEEP – your vulnerability…
-
Anchore: Anchore Extends Best-in-Class Container Security Offering with Bring Your Own SBOM Support
Source URL: https://anchore.com/news/anchore-releases-bring-your-own-sbom/ Source: Anchore Title: Anchore Extends Best-in-Class Container Security Offering with Bring Your Own SBOM Support Feedly Summary: Anchore Enterprise is a powerful, cost-effective, and compliant management, monitoring, and automation tool for understanding and securing complex software supply chains. SANTA BARBARA, CA – May 21, 2025 – Anchore, the market leader in software…
-
Scott Logic: An SBOM primer with some practical insights
Source URL: https://blog.scottlogic.com/2025/05/16/sbom-primer-practical-insights.html Source: Scott Logic Title: An SBOM primer with some practical insights Feedly Summary: We’ve been generating Software Bills of Materials (SBOMs) on client projects for several years now, and we’d like to share insights into the positive impact they’ve had on security, resilience and engineering quality, along with some considerations to bear…
-
AWS News Blog: Accelerate CI/CD pipelines with the new AWS CodeBuild Docker Server capability
Source URL: https://aws.amazon.com/blogs/aws/accelerate-ci-cd-pipelines-with-the-new-aws-codebuild-docker-server-capability/ Source: AWS News Blog Title: Accelerate CI/CD pipelines with the new AWS CodeBuild Docker Server capability Feedly Summary: AWS CodeBuild now offers Docker Server capability, enabling a dedicated and persistent Docker server within projects that dramatically reduces build times by maintaining a centralized cache, as demonstrated by a 98% reduction in build…