sca

Enterprise Supply Chain

Google’s open-source GUAC initiative will make information for securing the software supply chain readily available to everyone.

GUAC will allow developers, auditors, and risk management teams to evaluate risk more easily in their codebases. What: Google is seeking contributors to a new open-source project it has launched called Graph for Understanding Artifact Composition or GUAC. The goal of the effort, according to the company is to democratize the availability of software build, […]

Read More