[ad_1]
In episode 60 of DevNet Snack Minute, DevNet’s Supervisor of Developer Advocacy, Matt DeNapoli, and I speak with Stephen Augustus, Head of Open Supply at Cisco. On this episode we discuss “Scorecard”, and the way you utilize them to enhance the safety of your open supply mission.
Scorecard is an automatic software that assesses quite a few vital heuristics (“checks”) related to software program safety. It assigns every examine a rating of 0-10, giving shoppers of open-source tasks a simple option to choose whether or not their dependencies are secure. You should utilize these scores to:
- perceive particular areas the place you may strengthen the safety posture of your mission
- be sure dependencies are secure – e.g.,
- do I’ve binaries checked into my repository?
- do I’ve department safety configured?
- do I’ve CI checks?
- are we doing code critiques?
- make knowledgeable choices about accepting dangers, evaluating various options, or working with maintainers to make enhancements.
In Stephen’s demo and dialogue you see how Scorecard offers you a sensible option to know that safety challenges could be checked and addressed inside your mission.
Study concerning the new software Scorecard with Stephen Augustus, Head of Open Supply at Cisco.
Try the Scorecards repo on GitHub
Associated sources
We’d love to listen to what you assume. Ask a query or go away a remark under.
And keep linked with Cisco DevNet on social!
LinkedIn | Twitter @CiscoDevNet | Fb | Developer Video Channel
Share:
[ad_2]
