InfoSec Use of Compliance Tools for Open Source Software

4 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

Stop asking about how to integrate security into the development pipeline and start talking about how open source compliance is utilized by information security professionals. Security professionals are dissatisfied with how legacy application security software has been utilized by developers.

While 48% of the security respondents thought the ease of integration is the most important feature for developers adopting a specific AppSec tool, only 22% of developers thought likewise.

Of particular interest are the 277 companies he has identified as the developer infrastructure for building the hardware and software to support repeatable software construction.

In the meantime, take a look at what our survey respondents’ are using for open source software compliance.

DevOps Articles