What Good Software Supply Chain Security Looks Like for Highly Regulated Industries
Source: VMware Blog
Overview
Organizations running their business on open source software are faced with a more aggressive and complicated security and compliance landscape than ever before. According to Sonatype’s 10th Annual State of the Software Supply Chain report, malicious actors are bypassing transitional security tools by directly targeting developers. The report notes a rise in malicious packages.