Blog Archive

Dependency Health—assessing package risk with Snyk

Scoring security vulnerabilities 101: Introducing CVSS for CVEs

CRLF injection found in popular Python dependency, urllib3

JVM Ecosystem Survey 2019

Understanding Amazon S3 security and compliance on AWS

A Denial of Service vulnerability discovered in the Axios JavaScript package - affecting all versions of the popular HTTP client

8 Azure Repos Security Best Practices

Never store credentials as code/config in Azure Repos

Remove sensitive data in your files and Azure Repos history

Tightly control access to your Azure Repos

Add security testing to pull requests in Azure Repos

Add a SECURITY.md file to your Azure Repos

Provide granular permissions and groups for users in Azure Repos

Use Personal Access Tokens with Azure Repos

Rotate Azure Repos SSH keys and personal access tokens

Do you know how healthy your .NET dependencies are?

Azure Repos enriched with DevSecOps capabilities

Protect container images directly from your registries

190,000 users affected by Docker Hub’s security breach. Now what?

How much do we really know about how packages behave on the npm registry?

Shifting Docker security left

The top two most popular Docker base images each have over 500 vulnerabilities

80% of developers are not addressing Docker security

Take actions to improve security in your Docker images