What is Innersource? Innersource is not a product or service that you buy and install on your network. It is instead a term that refers to the overall workflow, methodology, community, and culture that optimizes an organization for open source style collaboration. Long story short, InnerSource refers to bringing the core principles of open source …
Are your applications — and the infrastructure they are running on — safe and compliant? As a developer, you choose and configure the right open source components. Now, you also own the process of writing code to provision and configure your cloud infrastructure, which can be accomplished using Infrastructure as Code (IaC). Infrastructure as Code …
Overview Develop. Fix. Maintain.Rinse.Repeat. Sound familiar? Well, if you’re a developer – – it probably does. It’s probably (at least) pretty close to how you spend your days. And while we can’t completely change the basic tenets of software development, with ADP and the “superpowers” it holds, we can certainly make it easier. High-performing development …
Lesson 2 Overview So, we’ve got some good news! The market is shifting and development teams are gaining budget authority to purchase tools that fit their needs better. This means going beyond vulnerability identification and warnings by integrating dependency management directly into your DevOps tooling. Develop Smarter, Not Harder Using open source libraries to build …
Lesson 1 Overview What’s that saying about development software, Software’s Eating The World? It’s true. As developers, we’re in the middle of everything now. We’re responsible for: Working with product owners Defining and refining what a feature will do Deciding how it will work Proving the value it will provide to our users and our …
Providing Nexus Intelligence at Your Fingertips Nexus Intelligence powers the Nexus Platform with precise data to automate open source governance at scale across every phase of the SDLC. Modern software practices require a modern approach. The Nexus Platform provides fast, precise, contextual, actionable, and continuous information about the component you use, allowing you to focus …
Works Where You Work IDEs are powerful because they show code hints and code style guidelines, allowing you to fix code and triage if issues are identified. Similarly, a Nexus IQ IDE integration lets developers make informed decisions when selecting your projects’ components — all in the integrated development environment that you’re used to. Better …
Nexus IQ — Part of the Complete Sonatype Platform Coverage The Nexus IQ Server acts as the brain for an organization implementing component lifecycle management. There, users will find a platform that provides functionality for managing policy, reviewing component and application information, and evaluating applications and repositories. The Nexus IQ Server has several integration points, …
Getting Started Sonatype prides itself on being an innovator in the Open Source space while adhering to the principles of DevSecOps while we design our products. At the core, DevSecOps principles expand the responsibility for security from security professionals to the whole organization. The exponential growth of the Open Source usage in applications in the …
Objectives The tool, linked in the image below, will serve as your guide as you set out to expose vulnerabilities in the applications your organization is using and/or distributing. After familiarizing yourself with this resource, you will be able to: Better understand the case for IQ server; what it is, what it does, and how …
Getting Started with IQ Server – Accessing the Tool Read More »
