Securing Your Source Code
Open-source components are increasingly becoming vital to software development. In their 2022 Octoverse report, GitHub found that 97% of apps use open-source software.1 In 2024, Gitnux reported that 96% of applications have at least one open-source component and 80% of the code in modern applications was open-source.2 This code represents the bulk of third-party dependencies we’ve discussed in previous chapters.
In this chapter, we’ll discuss the following topics:
- Best practices for sourcing and maintaining open-source components.
- Testing your own code as well as the code from third parties.
- The SBOM and its growing use as a security and compliance tool.
Before we dive in, it’s essential to review a key component...
