Scribe Security Releases Tools for Integrity Validation
Summary
From hijacked updates to compromised open source code, software supply chain attacks don’t seem to be slowing down. Both products are in early stages but with the state of security in open source software, CEO and co-founder Rubi Arbel says the market is long overdue for these tools. How would verification of the pipeline’s integrity look if you had only two points, the beginning and the end — including verifying the open source components?” The road to release was not easily traveled, Arbel says. “There is no good technology for software integrity today that we’re familiar with, especially one capable of doing it in an automatic way towards pipelines.” The open source bug spread pretty fast. The developer community continues to see growth and change in the way code is shared, and it’s more necessary than ever to stay vigilant with the software supply chain’s security.
Classifications
AskAI Classifications
LabelsLinked Companies
