Senior Security Solutions Manager Black Duck, United States
Open source makes up 77% of the code in the average application. With open-source dependencies flowing into the software development lifecycle though numerous avenues like package managers, container images, AI code generation and third-party libraries, it’s difficult to track exactly what is being used. However, this lack of visibility makes it difficult to effectively manage supply chain risk. In this product demo, you’ll learn how Black Duck SCA: • Plugs directly into the software development tool chain • Is used to keep vulnerable and malicious packages out of the supply chain • Helps teams identify and mitigate risk already in their applications