There is an exponential increase in usage of open source components. In fact, more than 90% of companies use open source. The risk introduced into the applications through open-source dependencies surpasses the risk generated by the private code by 10x. Lineaje’s Open-Source Manager (OSM) provides transparency for these sourced components, actively managing and mitigating the risks they pose to your organization. OSM offers enterprise-grade open-source governance tailored for complex organizations.
Lineaje now supports the import and export of CSAF/Vex documents. This allows software consumers to apply any mitigations for vulnerabilities published by software producers. The process involves:
These new features enhance Lineaje’s capability to secure software components and provide a clearer understanding of the associated risks and mitigations.
The development strategy of source code varies from organization to organization. Often, related projects may not exist together. From a SBOM management point of view, it is important to group complex projects together. The related projects may belong to different language/ package managers. For example an application project can have the nodejs ui code, along with the java backend code.
Lineaje CLI has the added ability to detect the related projects and group them together. This gives the customers the ease-of-use to handle complex projects.
Security Assessment Report prove as an excellent way to show the risks associated with each component in a software product. Lineaje enables generating security assessment reports for any project. The report contains all the dimensions of data associated with the project like vulnerabilities, security posture, code quality, suppliers, licenses, dependency tree etc. The report also contains the attestation and Inherent Risk Levels of all components. The Report also includes AI generated recommendation to reduce vulnerabilities.
Security Assessment Reports can be generated ta a project level (Project’s page) or at an organization level (Dashboard)
