OSS for enterprises: Procure Secure Components Faster with Superior Developer Experience
summary
Discover integrates Nexus IQ and Nexus Firewall plus SonarQube and CloudBees to enforce security, license and architecture policies and to turn component approval from weeks into minutes; the firewall blocked over 600 components since December 2018 and the platform has 1,500+ applications onboarded. Builds surface actionable fixes (exact safe version suggested), waivers auto-expire (60–90 days), APIs feed a Graphana-style exec dashboard, and gaps remain: automated dependency upgrades and precise method-level usage detection.
AI-written summary · about
chapters (8)
- 0:00Start
- 4:49Industry Trend
- 5:59What Are the Major Challenges
- 8:17Flat Map Stream Incident
- 10:29Automated Governance
- 15:23Triage Process
- 16:50Open-Source License Types
- 20:17Architecture Policy
related talks
38mDeveloper-Driven Security: Owning your projects from inception to commercialization
40mEmbracing Security - A Changing DevOps Landscape
45mOWASP A9: A Year Later - Are you still using components with known vulnerabilities?
06mIgnite - Managing Your Software Supply Chain
27mSecuring the Software Supply Chain: Integrating OpenSSF Scorecard, Jenkins, and the O...
52mOSS Security Maturity: Time to Put on Your Big Boy Pants!
51mA Roadmap for Your OSS Security Lifecyle Journey to Protect Customers
53mThe Secret Life of Maven Central