Cross-Industry Report Identifies Top 10 Open-Source Software Risks

Promoted by Endor Labs and featuring contributions from over 20 industry experts, the new Endor Labs Station 9 report identifies the top operational and security risks in open-source software.

JetBrains Adds Taint Analysis for PHP to Qodana Code Quality Platform

Qodana, JetBrains’ code quality platform, provides now support for PHP taint analysis in early preview. The feature aims to allow developers to detect taints in their programs, i.e. spots that are vulnerable to malicious inputs.

Docker+Wasm Reaches Technical Preview 2, Includes Three New Runtime Engines

Docker has announced the second technical preview of Docker+Wasm, aiming to make it easier to run Wasm workloads and extending runtime support by including Fermyon’s spin, Deislabs’ slight, and Bytecode Alliance’s wasmtime runtime engines.

GitHub Adds SBOM Export to Make it Easier to Comply with Security Requirements

GitHub has announced a new SBOM export feature meant to be used as part of security compliance workflows and tools. The new feature allows you to export NTIA-compliant SBOM easily, says GitHub.

Docker 4.18 Extends Scout, Adds Container File Explorer, Docker Init, and More

Docker Desktop’s latest 4.18 release, brings a wealth of new features, including vulnerability quickview, recommendations, and image diffing for Docker Scout, stable Container File Explorer, an init command to quickly add Docker to a project, and experimental Compose File Watch to monitor changes inside a project.