Breaches related to open source components have grown 50 percent since 2017, and an eye-opening 121 percent since 2014, according to a new survey from open source governance and DevSecOps automation specialist Sonatype. But the survey finds that those companies with mature DevOps practices are 24 percent more likely to have deployed automated security practices throughout their development lifecycle. Investments in open source governance, container security, and web application firewalls are noted as being the most critical to companies pursuing DevSecOps transformations. But resourcing and training still present challenges, 48 percent of respondents admit that they don't have enough time…
[Continue Reading]