Our blog

The pull request workflow might seem unnecessary for projects with one developer, but it offers security, testing, and feedback benefits.

Explore essential GitHub code security review strategies, specifically designed for projects where security cannot be compromised.

Your security reviews need to be based on facts, not vibes.

Kusari Inspector is now generally available to provide immediate supply chain security insights in pull requests.

Artificial intelligence can help secure the software supply chain, but it also brings additional considerations.

Securing the software supply chain doesn't end when a release ships. Maintaining released software is an important part of security.

There are so many tools to build SBOMs for your application. How do you know which one to pick?

Asking open source contributors to prove their legal identity doesn’t make software more secure.