Secure Open Source Dependencies with Semgrep Supply Chain

September 19th, 2024

Dependencies and open source code comprise a large amount of an organization's underlying code base. Management and monitoring of that codebase can already be taxing on developers; having a large set of false positive vulnerabilities can be a full sink of developer resources.

Utilization of open source is critical to increase developer productivity, but how do teams balance speed and security?

During this webinar you will learn:

  • What is Semgrep Supply Chain

  • How to quickly scan for vulnerabilities in open source dependencies using Semgrep Supply Chain

  • Determine what is reachable, and remediate the 2% open source vulnerabilities in your code that are actually a problem

  • How to triage results into developer's workflow

Katie Kent
Semgrep
Product Manager
Cullen Harwood
Semgrep
Senior Product Marketing Manager