Blogs

Efficient Dependency Management: Leveraging Manifest Files, Lockfiles, and SemVer Specifications

Semgrep

Evaluating Software Supply Chain (SCA) dependencies with a plan for manifests, lockfiles, & semver to prioritize direct & transitive dependencies.

Visit Site

London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep From Gatekeepers to Guardrails: Automating Your PCI DSS v4.0.1 StrategySemgrep A Guide to Extended Threat Detection and Response: What It Is and How to Choose the Best SolutionsCybersecurity Exchange Puppet’s New Mission: Automating Cloud Native InfrastructureThenewstack AWS Enterprise Container Management with PulumiPulumi Pulumi Neo Now Supports AGENTS.mdPulumi Svelte for the Experienced React DevCss Tricks Scaling Organizations Should Consider Building a Website Backed by a CRM PlatformCss Tricks Analyze JSON Data Using SQL and DuckDBMotherduck Spatial Data Management with DuckDB ft. MattForrestMotherduck Docker Captain Take 5Docker Docker Community All Hands RecapDocker Docker Desktop 4.23: Updates to Docker Init, New Configuration Integrity Check, Quick SearchDocker Docker at Cloud Expo Asia: GenAI, Security, and New InnovationsDocker How AI Assistants Can Decode GitHub Repos for UI WritersDocker Today Is The Day!Docker