Join David Bohannan, an R&D engineer at Black Duck, as he demonstrates using Black Duck's IDE plug-in, Code Sight to run static analysis on Python code within Visual Studio. Watch as Code Sight instantly detects vulnerabilities like OS command injection and cross-site request forgery while code is being written, helping developers fix issues early in the software lifecycle. David will demonstrate how leveraging Coverity's Rapid Scanning engine through Code Sight can allow developers to tackle issues such as secret scanning and ensure hardcoded secrets are flagged before they become risks to applications further downstream.

Chris provides his perspective on Jit's approach to unifying leading open source product security scanners in one place to consolidate scanning, prioritization, and remediation.

Johan Berggren, Staff Security Engineer at Google, joined Defender Fridays to discuss OpenRelik - an OSS platform designed for collaborative digital forensic investigations.

Carlos Perez, Director of Security Inteligence at TrustedSec, joined us to discuss Supply Chain Issues with OSS Libraries.

Watch the full video for more...