Security Resources

10 Maven Security Best Practices

Our JVM ecosystem survey results, shows Maven’s dominance continues into 2018, and doesn’t look like it’s going anywhere with six in ten developers using the build tool in their main project. In this cheat sheet we provide 10 security best practices for how you can enhance your Maven-foo.

10 npm Security Best Practices

Concerned about npm vulnerabilities? It is important to take npm security best practices into account for both frontend, and backend developers. Open source security auditing is a crucial part of shifting security to the left, and npm package security should be a top concern, as we see that even the official npm command line tool has been found to be vulnerable.

10 Docker Security Best Practices

The topic of Docker container security raises concerns ranging from Dockerfile security—relating to the Docker base images and potential security misconfigurations,—to the Docker container security at runtime regarding network ports, user privileges, Docker mounted filesystem access, and others. In this article, we will focus on the Docker container security aspects related to building a Docker image, reducing the security vulnerabilities count introduced by Docker base images as well as Dockerfile security best practices.

10 Serverless security best practices

10 serverless security best practices for securing your serverless and cloud functions, from managing secrets, to data security, function isolation, least privileges and many more!

10 Java security best practices

In this cheat sheet edition, we’re going to focus on ten Java security best practices for both open source maintainers and developers.

Secure development when working from home — tips and tricks

In this post, Snyk founder Guy Podjarny offers a few suggestions for ways you can adapt your security policies for a newly remote workforce. 

Secure code review: 8 security code review best practices

It’s always a good idea to check for security issues in code that you review. In case you don’t know what to look for, here’s a handy checklist to give you pointers for your next code reviews!

Angular security best practices

Previously, we have shared our AngularJS Security Fundamentals cheatsheet. This time around, we dive straight into the modern Angular security best practices.

Snyk CLI cheat sheet

Tips on how to get the most out of the Snyk CLI as a tool to test, monitor, and remediate known vulnerabilities in your applications

Cheatsheet: top 10 application security acronyms

Go security cheatsheet: 8 security best practices for Go developers

In this installment of our cheatsheet series, we’re going to cover eight Go security best practices for Go developers.

10 best practices to build a Java container with Docker

Step-by-step best practices for building a Java container and running it inside a Docker image.