Security Resources

The 2021 IaC Report: Infrastructure as Code Security Insights

Snyk investigated how organizations are adopting IaC technologies and common roadblocks to its widespread use – and what organizations can do to overcome them.

JVM Ecosystem Report 2021 | Snyk

Infrastructure as Code Security Insights | Snyk

Cloud Native Application Security Report | Snyk

State of Open Source security 2022 | Snyk

Python Security Insights Report

State of cloud security 2022

Static Application Security Testing (SAST) Tools

Learn more about Static Application Security Testing (SAST), its pros and cons, and how it can help you to keep your source code secure.

Local Type Inference Cheat Sheet for Java 10 and beyond!

One of the main features in Java 10 in Local Type Inference, which allows us to substitute a type with the var reserved word in our source code. However, in order for this to become a feature that is useful to a developer rather than a feature developers will rue for many years to come, we need to learn how to use it and when to use it properly. This cheat sheet and blog is a reduced version of an blog post that Stuart Marks wrote on the OpenJDK site.

10 GitHub Security Best Practices

In this cheat sheet, we will discuss ten best practices you can implement to improve your GitHub security. Download the one-pager and read on for a more extensive explanation of all ten curated actions.

Zip Slip Vulnerability Cheat Sheet

Zip Slip is a form of a Directory Traversal that can be exploited by extracting files from an archive. This cheat sheet informs you of vulnerable libraries and code snippets that are exploitable to a Zip Slip attack. Additionally it provides you with the information you need to upgrade to fixed library versions and offers tips on how to find and fix your own vulnerable code.

10 Spring Boot security best practices

This month’s cheat sheet is about how you can secure your Spring Boot application. Spring Boot has dramatically simplified the development of Spring applications. Its autoconfiguration and starter dependencies reduce the amount of code and configuration you need to begin an app. If you were used to Spring and lots of XML in back in the day, Spring Boot is a breath of fresh air.