curphey
Re:Open-source abuse is alive and well
on Thursday October 05, 2023 @04:33PM (#37783934)
Brazen copyright change on an OSS project from a developer that looks like he works for a big company. I am sure they don't know or authorised it but still...attempt to steal in plain sight.
Re:ZAP is joining the Software Security Project (and leaving OWASP)
on Tuesday August 01, 2023 @08:18AM (#36955034)
Well done ZAP crew, great news for all users !
Dependency Pinning Only Works If You Review the Updates
Re:Free static aplication security testing tool for open-source code
on Thursday May 12, 2016 @12:33PM (#11684691)
Its a DevSec tool rather than traditional security static analysis focused on a very specific but important use case of helping developers avoid using vulnerable or insecure open-source libraries.