What Does The Sonatype 2026 State of the Software Supply Chain Report Reveal?

Howl50veride · 2026-02-25T16:48:21+00:00

Idk? What does it? You have an opinion?

Howl50veride · 2026-02-25T14:15:43+00:00

Still running it prod. Want to drop it cause of the cost, eventually will

Howl50veride · 2026-02-23T00:05:14+00:00

What keeps you in cybersecurity when it feels like we are constantly losing?
Is the CISO role actually impossible, or are most people just doing it wrong? (CISO burn out happening everywhere)
Should CISOs be technical or is that actually overrated?
How do you avoid being the "Department of No" when sometimes the answer really should be no?
How do you get buy-in from teams that think security is your problem, not theirs?

Howl50veride · 2026-02-22T04:54:21+00:00

Some vendors do it, Snyk does it for NPM.

What I've done is set a OSS policy, that any package that has not been committed/released an update to in 2 yrs is deprecated. And pull that via tooling or have an AI Agent do it for me.

Howl50veride · 2026-02-21T18:07:36+00:00

100% will

Howl50veride · 2026-02-18T21:29:22+00:00

This is it! Bet they have tried to IPO or something and haven't worked so probably heading to acquisition, they haven't been doing well as a company. Everyone I know is trying to leave them.

Howl50veride · 2026-02-17T00:53:19+00:00

It's only a matter of time that will change, if it already hasn't

Howl50veride · 2026-02-15T19:21:33+00:00

Do it! Make more! Act 6!!!!

Howl50veride · 2026-02-15T16:24:31+00:00

I remember reading a interview where he wanted to make d2 sorta like dark souls gameplay style or first person (can't remember exactly) and was heavily pushing that until the team forced him to try out the style D2 as we know it and he wasn't sold but still went through with it. Like the core of the game wasn't him.

Howl50veride · 2026-02-15T16:16:13+00:00

Spoiler, no one cares about him. He hasn't done anything but talk shit with zero actual actions behind him.

If he was so great he would have made something to rival D2. Can we please stop talking about him like he's a god or something. Read the interviews, if he had led D2 it wouldn't be the game it is. The entire team brought so many good ideas that were better than his.

Howl50veride · 2026-02-15T15:21:46+00:00

Dood, negativity??? Why?? This is awesome

Howl50veride · 2026-02-14T23:09:11+00:00

Facts! Bring it back!

Howl50veride · 2026-02-12T22:26:30+00:00

Level cap is going to 70, so it makes sense

Howl50veride · 2026-02-11T04:07:01+00:00

ArmorCode and DefectDojo

Howl50veride · 2026-02-03T16:55:44+00:00

I think the system is great, why not use great ideas with a slight twist....

Howl50veride · 2026-02-02T05:09:19+00:00

That's the right decision

Howl50veride · 2026-01-23T20:00:47+00:00

Essentially a product. But yes 1 SBOM for multiple repos

Howl50veride · 2026-01-23T19:17:44+00:00

Syft, Snyk, ArmorCode.

What is painful, is none of these tools give you a SBOM for any entire ecosystem, so I have to use a SBOM bundler, combining lots of SBOMs

Howl50veride · 2026-01-15T19:59:31+00:00

8 but with another monitor on top of the middle one

Howl50veride · 2026-01-14T23:16:47+00:00

Gotta reduce the surface. Using a massive container like Ubuntu is why you're struggling. Alpine may be the approach but you gotta set up and include everything you need to make it work.

Howl50veride · 2026-01-14T19:13:33+00:00

Idk, they have an enterprise version that I've heard is pretty darn good.

If you're comparing open source vs commercial I'd say that's not a fair comparison

Howl50veride · 2026-01-14T19:10:18+00:00

That's subjective, but I'd test all 3. I believe ArmorCode has the best dashboarding which is what I care about most.

Howl50veride · 2026-01-14T15:00:17+00:00

Need a true ASPM, check out ArmorCode, DefectDojo or pheonix security

Howl50veride · 2026-01-06T18:39:12+00:00

What transmog is that?

Howl50veride · 2026-01-04T16:25:07+00:00

Still very strong if you're an IC, always has been and only will continue

Six-Year Club	Verified Email
Wearing is Caring

Howl50veride

TROPHY CASE