Blogs

Software supply chain security is hard

Semgrep

Software Composition Analysis (SCA) tools are often noisy and create cross-team friction, yet we need them to manage the ever-increasing security exposure from developing applications with open source libraries.

Visit Site

Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Semgrep × Cursor Hooks: Making Security Reliable for AgentsSemgrep Cloud Security Trends & Challenges: Complete GuideCybersecurity Exchange Security Implementation for Responsible AI: A Practical FrameworkCybersecurity Exchange How to Conduct an AI Agent Security Audit [+ Checklist]Zapier The Best Video Editing Software in 2026 (Including Free Options)Zapier Intel Unveils Next Generation Neuromorphic Computing ChipThenewstack When CI Meets CD: Deliver With ConfidenceThenewstack Pancakes Are Delicious and Data Centers Are for Free StuffThenewstack DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Lessons Swift Designer Chris Lattner Has Learned about LeadershipThenewstack Transform and Future-Proof Your Architecture with MACHThenewstack Security Considerations for API-Driven Apps Deployed to CloudThenewstack Selecting the Right Database for Your MicroservicesThenewstack Oso Unbundles Security AuthorizationThenewstack Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi