DevOps Articles

Get a Handle on Software Supply Chain Security with LFX

https://thenewstack.io/ransomware-is-more-real-than-you-think/ deservedly makes the headlines, but protecting the https://thenewstack.io/securing-the-software-supply-chain-with-a-software-bill-of-materials/ is just as important. At the recent https://events.linuxfoundation.org/lf-member-summit/, Jim Zemlin, the https://training.linuxfoundation.org/training/course-catalog/?utm_content=inline-mention executive director unveiled its newest effort in protecting our code: https://security.lfx.linuxfoundation.org/#/. LFX Security currently supports dependency and vulnerability scanning for JavaScript, Node.js (npm), Java,.NET, Scala, Ruby, Python, Golang, and PHP.

Since new security vulnerabilities appear every day, the LFX Security vulnerability database is updated every week.

It does this by scanning your project’s Git-based repository and tracking down your dependencies’ licenses against the https://spdx.org/licenses license list.