Exploit exploitability: prioritize supply chain findings with EPSS
EPSS is a powerful prioritization mechanism: when combined with Semgrep’s dataflow reachability analysis, EPSS enables you to deprioritize 99% of findings and focus on the 1% that matter most.
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep
How Semgrep & StackHawk Help AppSec Teams Prioritize Real RisksSemgrep
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
NO_EXTERNAL_CSS_AT_IMPORTSVercel
How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack
Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker
Achieve security and compliance goals with policy guardrails in Docker ScoutDocker
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation CampaignSocket
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket
Securing the Financial Frontier: How Capital One Uses Socket for Open Source SecuritySocket
Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket
Signing is Just the StartSocket
Stop Technical Debt Before It Damages Your CompanyThenewstack
