Curated security research, vulnerabilities, advisories and tools for practitioners.

#sca

Security coverage tagged sca.

1.

Open Source Vulnerability Management: Fixing Dependency Risk Without Alert Fatigue

blog | 2026-06-28 07:00 | bugbunny.ai | original ↗ | #supply-chain | #vulnerability-management | #open-source

2.

Software Composition Analysis: Beyond Dependency CVE Lists

blog | 2026-05-28 07:00 | bugbunny.ai | original ↗ | #supply-chain | #vulnerability-management | #devsecops

3.

Survive the AI Code Blizzard: Introducing Snippet Detection

blog | 2026-03-18 13:06 | jfrog.com | original ↗ | #ai-security | #supply-chain | #jfrog

4.

Understanding Open-Source License Risk in Modern Software

blog | 2026-01-19 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #open-source

5.

SAST vs SCA: Securing the Code You Write and the Code You Depend On

blog | 2026-01-06 00:00 | aikido.dev | original ↗ | #supply-chain | #appsec | #vulnerability-management

6.

JFrog vs Checkmarx: An AppSec Solution Comparison

blog | 2025-12-31 15:24 | jfrog.com | original ↗ | #ai-security | #supply-chain | #appsec

7.

JFrog vs Snyk: Why Effective AppSec Must Move Beyond Source Code

blog | 2025-12-30 15:13 | jfrog.com | original ↗ | #supply-chain | #appsec | #jfrog

8.

SCA Everywhere: Scan and Fix Open-Source Dependencies in Your IDE

blog | 2025-11-28 00:00 | aikido.dev | original ↗ | #supply-chain | #devsecops | #aikido

9.

Securing Vibe Coding: JFrog Introduces AI-Generated Code Validation

blog | 2025-11-13 07:55 | jfrog.com | original ↗ | #ai-security | #supply-chain | #jfrog

10.

Supply Chain Security: The Ultimate Guide to Software Composition Analysis (SCA) Tools

blog | 2025-10-02 00:00 | aikido.dev | original ↗ | #supply-chain | #open-source | #cve

11.

Why Securing Bazel Builds is So Hard (And How to Make It Easier)

blog | 2025-08-11 00:00 | aikido.dev | original ↗ | #supply-chain | #aikido | #sca

12.

ASPM Tools: Essential Features & How to Evaluate Vendors

blog | 2025-07-24 00:00 | aikido.dev | original ↗ | #cloud | #appsec | #vulnerability-management

13.

Why Cloudsmith Is a Risk You Can’t Afford: A Wake-Up Call on Superficial Software Supply Chain Security

blog | 2025-06-24 13:09 | jfrog.com | original ↗ | #supply-chain | #devsecops | #jfrog

14.

Cloud-Native Security Platforms: What They Are and Why They Matter

blog | 2025-04-02 00:00 | aikido.dev | original ↗ | #cloud | #cloud-security | #sast

15.

Container Scanning & Vulnerability Management

vulnerability | 2025-03-20 00:00 | aikido.dev | original ↗ | #supply-chain | #vulnerability-management | #secrets

16.

The Cost Savings of Fixing Security Flaws in Development

blog | 2025-02-25 16:33 | hackerone.com | original ↗ | #cloud | #vulnerability-management | #sast

17.

How HackerOne Reinvented Security for Developers

blog | 2025-01-27 17:39 | hackerone.com | original ↗ | #ai-security | #devsecops | #code-review

18.

Resurrecting Shift-Left With Human-in-the-loop AI

blog | 2025-01-16 21:30 | hackerone.com | original ↗ | #ai-security | #devsecops | #sast

19.

The Startup's Open-Source Guide to Application Security

blog | 2024-12-23 00:00 | aikido.dev | original ↗ | #cloud | #appsec | #open-source

20.

Visma’s Security Boost with Aikido: A Conversation with Nicolai Brogaard

blog | 2024-11-06 00:00 | aikido.dev | original ↗ | #sast | #case-study | #gdpr

21.

HackerOne in DevSecOps

blog | 2021-06-21 19:00 | hackerone.com | original ↗ | #bug-bounty | #devsecops | #ci-cd