25 captures
10 Nov 2021 - 08 Dec 2023
Nov
DEC
Jan
16
2021
2022
2023
success
fail
About this capture
COLLECTED BY
Collection:
Save Page Now
TIMESTAMPS
The Wayback Machine - https://web.archive.org/web/20221216225649/https://devops.com/quali-on-devops-com/
Quali on DevOps.com - DevOps.com
DevOps.com
Latest
Articles
Features
Most Read
News
News Releases
Topics
AI
Continuous Delivery
Continuous Testing
Cloud
Culture
DataOps
DevSecOps
Enterprise DevOps
Leadership Suite
DevOps Practice
ROELBOB
DevOps Toolbox
IT as Code
Videos/Podcasts
Techstrong.tv Podcast
Techstrong.tv Video Podcast
Techstrong.tv - Twitch
DevOps Unbound
Webinars
Upcoming
On-Demand Webinars
Library
Events
Upcoming Events
On-Demand Events
Sponsored Communities
CloudBees
IT as Code
Rocket on DevOps.com
Traceable on DevOps.com
Quali on DevOps.com
Related Sites
Techstrong Group
Container Journal
Security Boulevard
Techstrong Research
DevOps Chat
DevOps Dozen
DevOps TV
Techstrong TV
Techstrong.tv Podcast
Techstrong.tv Video Podcast
Techstrong.tv - Twitch
Media Kit
About
Sponsor
AI
Cloud
Continuous Delivery
Continuous Testing
DataOps
DevSecOps
DevOps Onramp
Practices
Low-Code/No-Code
IT as Code
More
Application Performance Management/Monitoring
Culture
Enterprise DevOps
ROELBOB
Latest
Connecting Your Cloud & DevOps Tools to Enable CI/CD
January 11, 2022 | Louis Vistola
Enabling Developers with Infrastructure Automation
November 15, 2021 | Louis Vistola
Understanding and Controlling Cloud Costs
November 11, 2021 | Louis Vistola
Beyond IaaS: The Benefits of Using EaaS
November 1, 2021 | Louis Vistola
Quali on YouTube
Quali Spotlight
White Papers
Did You Know
Quali on Twitter
Tweets by QualiSystems
Software Supply Chain Security Pulsemeter
Step
1
of
6
16%
Are you worried about software supply chain attacks?
Very worried
Somewhat worried
A little worried
Not very worried
Not at all worried
Which of these do you include as part of your software supply chain security analysis today?
1st party code; 3rd party open-source dependencies; containers; pipeline tools
3rd party open-source dependencies, and containers only
3rd party open-source dependencies only
We aren't focusing on software supply chain security today
Do you currently produce software bill of materials (SBOMs) for your applications?
All of my applications
Most of my applications (70 - 90%)
Some of my applications (40 - 70%)
A few of my applications (10 - 40%)
None of my applications
Of those SBOMs produced, how many are published?
All of my SBOMs are published
Most of my SBOMs are published (70 - 90%)
Some of my SBOMs are published (40 - 70%)
A few of my SBOMs are published (10 - 40%)
None of my SBOMs are published
What are the main drivers for using SBOM? (select all that apply)
Improving vulnerability response
Mandate from senior management
Regulatory requirement
Third-party/Partner risk management reporting
I heard about it and it seems cool
What are the key factors considered in your selection of open-source packages? (select all that apply)
Functionality
Widespread use/Popularity
Security/Risk
Project Maturity
Community development, fixes and support
How do you secure the open-source software used in your applications? (select all that apply)
Only authorized packages are allowed to be used
Require signed components in CI process
Software Composition Analysis
Monitor vulnerability reports
Software inventory tracking (SBOM)
Δ
