Traffic Protocol Analyzer Wireshark Gets its Own Foundation

The popular open-source protocol analyzer Wireshark has a new permanent home in the form of the Wireshark Foundation, which should provide the means for its further, long-term evolution, says Sysdig, which took over as the project main sponsor in 2022.

Cross-Industry Report Identifies Top 10 Open-Source Software Risks

Promoted by Endor Labs and featuring contributions from over 20 industry experts, the new Endor Labs Station 9 report identifies the top operational and security risks in open-source software.

JetBrains Adds Taint Analysis for PHP to Qodana Code Quality Platform

Qodana, JetBrains’ code quality platform, provides now support for PHP taint analysis in early preview. The feature aims to allow developers to detect taints in their programs, i.e. spots that are vulnerable to malicious inputs.

Docker+Wasm Reaches Technical Preview 2, Includes Three New Runtime Engines

Docker has announced the second technical preview of Docker+Wasm, aiming to make it easier to run Wasm workloads and extending runtime support by including Fermyon’s spin, Deislabs’ slight, and Bytecode Alliance’s wasmtime runtime engines.

GitHub Adds SBOM Export to Make it Easier to Comply with Security Requirements

GitHub has announced a new SBOM export feature meant to be used as part of security compliance workflows and tools. The new feature allows you to export NTIA-compliant SBOM easily, says GitHub.