4 ms·
There seems to be a lot of confusion between malware and vulnerabilities. None of the vendors mentioned in this subthread detects malicious code, only vulnerabi
by mgii 3y ago
There seems to be a lot of confusion between malware and vulnerabilities. None of the vendors mentioned in this subthread detects malicious code, only vulnerabilities.
Good as they'll be in detecting vulnerabilities, you are still unprotected from malicious code planted in your code bases.
- richbell 3y ago> None of the vendors mentioned in this subthread detects malicious code, only vulnerabilities Sonatype does if you pay $$$ for Firewall, but that only catches things installed via a package manager.