Название: Automated Code Remediation: How to Refactor and Secure the Modern Software Supply Chain
Автор: Pat Johnson, Olga Kundzich, Jonathan Schneider
Издательство: O’Reilly Media, Inc.
Год: 2023-05-19
Язык: английский
Формат: pdf, epub (true)
Размер: 10.2 MB
The software industrial revolution has arrived. There's an explosion of custom applications today, and we assemble them faster than ever from third-party and open source software. But as applications grow in complexity and vulnerabilities mount, updating software becomes a tedious, intractable part of a developer's job. When you fail to keep up, the software becomes less secure and harder to maintain and eventually stops working. This report explains how organizations can stay on top of software vulnerabilities and maintenance, freeing developers to focus on creating new solutions. Code remediation is a standard practice used by development teams to whittle down technical debt, whether it’s addressing security vulnerabilities, migrating frameworks, updating dependencies, or fixing code quality issues. All of these tasks involve manual line-by-line, repository-by-repository code changes that can be tedious and error prone. Because this work takes up a significant portion of a devel- oper’s day-to-day work, it takes away from business value work. Now, let’s imagine a world where code remediation is automated and the value this could bring to your organization.