Checkmarx announced a new generation in software supply chain security with its Secrets Detection and Repository Health solutions to minimize application risk.
ActiveState introduced a methodology for successfully leveraging open source languages with its Open Source Language Automation blueprint.
Comprised of four phases, this blueprint aims to provide the industry with guidelines to decrease the costs and risks of managing open source languages.
ActiveState has been an open source language leader for more than 20 years and has learned the challenges faced by management and developers with open source languages. And these challenges are exacerbated with polyglot or multilingual environments. The documented four-phase methodology to implement Open Source Language Automation establishes a systematic and automated workflow that decreases costs and risks of managing open source languages.
The four phases and their resulting outcomes are:
- Define Open Source Language Policies: Programmatically enforce open source language policies to ensure compliance against entire organization.
- Centralize Open Source Language Dependencies: Track languages and packages across DevOps to assess open source usage.
- Automate Open Source Language Builds: Reduce vulnerabilities and increase application quality.
- Deploy and Manage Open Source Language Artifacts: Automatically update all of your test, stage and production servers with the appropriate and latest open source language builds.
Bart Copeland, President and CEO, ActiveState: "We are dedicated to helping the industry realize the true value of working with open source languages. We believe you should be able to track when and where your applications were vulnerable and respond with automatic enforcement of your open source language policies. Management should gain security and stability and your development teams should attain greater velocity."
Industry News
SmartBear has appointed Dan Faulkner, the company’s Chief Product Officer, as Chief Executive Officer.
Horizon3.ai announced the release of NodeZero™ Kubernetes Pentesting, a new capability available to all NodeZero users.
Veracode acquired certain assets of Phylum, including its malicious package analysis, detection, and mitigation technology.
AppViewX announced the completion of its acquisition by Haveli Investments.
Check Point® Software Technologies Ltd. has been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Email Security Platforms (ESP).
Progress announced its partnership with the American Institute of CPAs (AICPA), the world’s largest member association representing the CPA profession.
Kurrent announced $12 million in funding, its rebrand from Event Store and the official launch of Kurrent Enterprise Edition, now commercially available.
Blitzy announced the launch of the Blitzy Platform, a category-defining agentic platform that accelerates software development for enterprises by autonomously batch building up to 80% of software applications.
Sonata Software launched IntellQA, a Harmoni.AI powered testing automation and acceleration platform designed to transform software delivery for global enterprises.
Sonar signed a definitive agreement to acquire Tidelift, a provider of software supply chain security solutions that help organizations manage the risk of open source software.
Kindo formally launched its channel partner program.
Red Hat announced the latest release of Red Hat Enterprise Linux AI (RHEL AI), Red Hat’s foundation model platform for more seamlessly developing, testing and running generative artificial intelligence (gen AI) models for enterprise applications.
Fastly announced the general availability of Fastly AI Accelerator.