JetBrains Adds Taint Analysis for PHP to Qodana Code Quality Platform

Qodana, JetBrains’ code quality platform, provides now support for PHP taint analysis in early preview. The feature aims to allow developers to detect taints in their programs, i.e. spots that are vulnerable to malicious inputs.

Docker+Wasm Reaches Technical Preview 2, Includes Three New Runtime Engines

Docker has announced the second technical preview of Docker+Wasm, aiming to make it easier to run Wasm workloads and extending runtime support by including Fermyon’s spin, Deislabs’ slight, and Bytecode Alliance’s wasmtime runtime engines.

GitHub Adds SBOM Export to Make it Easier to Comply with Security Requirements

GitHub has announced a new SBOM export feature meant to be used as part of security compliance workflows and tools. The new feature allows you to export NTIA-compliant SBOM easily, says GitHub.

Docker 4.18 Extends Scout, Adds Container File Explorer, Docker Init, and More

Docker Desktop’s latest 4.18 release, brings a wealth of new features, including vulnerability quickview, recommendations, and image diffing for Docker Scout, stable Container File Explorer, an init command to quickly add Docker to a project, and experimental Compose File Watch to monitor changes inside a project.

Google Open Sources Bazel Plugin to Automate Secure Distroless Image Creation

Google and Bazel consulting firm Aspect announced version 1.0 of Bazel plugin rules_oci. Aimed to simplify secure container image creation using Bazel with special emphasis on Distroless images, the new plugin obsoletes rules_docker and improves it on a number of counts.