#OSSIndex - Twitter Hashtag

over 5 years ago

Find vulnerabilities in your favorite OSS packages, before they find you. ;) https://t.co/DNZKNWiG1H #OSSIndex #Sonatype

0

2

1

0

Justin Young @whyjustin

about 6 years ago

Stuck at home wondering what you want to do on Thursday? Come spend an hour with @sonatypeDev and chat about #OSSIndex and securing @gradle builds. This is our first informal hangout with @sonatypeDev and I'm excited to see these starting. https://t.co/J37ZWGXXnL

0

2

3

0

chetan conikee

@conikeec

about 7 years ago

Published a two part series on Software Composition Analysis using Semantic Signatures, OSSIndex and @ShiftLeftInc Ocular https://t.co/fmRKM3UKhS https://t.co/Biwr62Dw6o Shout out to @sonatype #ossindex @EUSP @AllDayDevOps

0

4

8

0

Justin Young @whyjustin

over 7 years ago

It's awesome working with a team who does neat stuff like this and for a company that supports it. @sonatype #ossindex

sonatypeDev @sonatypeDev

over 7 years ago

Hi! We open sourced a fun tool for #golang developers called #nancy, and it will check your dep or go mod based projects for vulnerabilities against @Sonatype #ossindex cc @sdboyer https://t.co/in08Ny2edz CHECK IT OUT!

sonatypeDev's tweet photo. Hi! We open sourced a fun tool for #golang developers called #nancy, and it will check your dep or go mod based projects for vulnerabilities against @Sonatype #ossindex cc @sdboyer https://t.co/in08Ny2edz CHECK IT OUT! https://t.co/zPf5o7Y5A7

1

28

29

2

0

4

1

0

sonatypeDev @sonatypeDev

over 7 years ago

Hi! We open sourced a fun tool for #golang developers called #nancy, and it will check your dep or go mod based projects for vulnerabilities against @Sonatype #ossindex cc @sdboyer https://t.co/in08Ny2edz CHECK IT OUT!

1

28

29

2

0

Relief Applications @Reliefapps

over 7 years ago

Open source projects are vulnerable because of dependencies. Keep your dependencies secure There are few open source checkers like #retirejs (https://t.co/X8PKQhP8Nh) and #OSSindex (https://t.co/Vdcn4qgI1S). And paid options like @dependabot . #websecurity #javascript #nodejs

2

7

1

0

Justin Young @whyjustin

over 7 years ago

#OSSIndex vulnerability scans as part of your #Maven lifecycle; easy as configure and protect.

Maven Plugin Releases @ASFMavenRelease

over 7 years ago

New release! org.sonatype.ossindex.maven:ossindex-maven-plugin version 3.0.2 at org.sonatype.ossindex.maven:ossindex-maven-plugin https://t.co/4hFHnJNbGs

0

3

0

7

2

1

0

Dependency-Track @DependencyTrack

almost 8 years ago

@ChristosMatskas @johnkors @shehackspurple @MaximRouiller @kashyapa @Owasp_DevSlop @ctxt @blowdart @snyksec Dependency-Track integrates natively with #OSSIndex, so yes, we support NuGet. Snyk currently doesn’t support PackageURL but as soon as they do, we’ll be able to support it. Use a BoM format like CycloneDX to track across ecosystems with extreme accuracy.

0

2

1

0

Dependency-Track @DependencyTrack

almost 8 years ago

@OWASP Dependency-Track v3.2 is released with native support for #npm Audit, @sonatype #OSSIndex, and configurable notifications supporting #chatops via Slack, Microsoft Teams, email, and outbound webhooks. #sca #opensource #owasp #devops https://t.co/GHmfWuvEml

DependencyTrack's tweet photo. @OWASP Dependency-Track v3.2 is released with native support for #npm Audit, @sonatype #OSSIndex, and configurable notifications supporting #chatops via Slack, Microsoft Teams, email, and outbound webhooks. #sca #opensource #owasp #devops https://t.co/GHmfWuvEml https://t.co/6UTep9o84k

0

3

1

0

Dependency-Track @DependencyTrack

almost 8 years ago

Native support for analyzing components with #OSSIndex is coming in a future release. Huge thanks to @sonatype for offering this service and to @sonatypeDev for creating it. #opensource #oss #sbom #PackageURL #appsec #owasp