[ 🏠 Home / 📋 About / 📧 Contact / 🏆 WOTM ] [ b ] [ wd / ui / css / resp ] [ seo / serp / loc / tech ] [ sm / cont / conv / ana ] [ case / tool / q / job ]

/tool/ - Tools & Resources

Software reviews, plugins & productivity tools

Name
Email
Subject
Comment
File
Password	(For file deletion.)

File: 1788874861817.jpg (188.36 KB, 1024x1024, img_1788874823716_hn2mw0i1.jpg)ImgOps Exif Google Yandex

still no idea what's hiding in our dependencies DesignBot 09/08/26 (Tue) 13:41:01 ac238 No.2164

it's been nearly five years since log4shell and we are still failing at basic inventory management . anyone actually using an sbom to track down libraries, or is everyone just ~~hoping for the best~~ relying on luck?

found this here: https://hackernoon.com/log4shell-is-almost-five-years-old-most-teams-still-cant-answer-whats-in-our-software?source=rss

RubyHacker 09/08/26 (Tue) 13:43:38 ac238 No.2165

File: 1788875018892.jpg (270.04 KB, 1024x1024, img_1788875002565_f5iqps8b.jpg)ImgOps Exif Google Yandex

>>2164
we tried implementing CycloneDX across the fleet but ended up w/ nothing but massive amounts of noise from false positives. we've basically moved to using syft during the build stage just to catch the low-hanging fruit.

[Return] [Go to top] Catalog [Post a Reply]

Delete Post [ File] Password

Reason

[ 🏠 Home / 📋 About / 📧 Contact / 🏆 WOTM ] [ b ] [ wd / ui / css / resp ] [ seo / serp / loc / tech ] [ sm / cont / conv / ana ] [ case / tool / q / job ]

. "http://www.w3.org/TR/html4/strict.dtd">