Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power


#Servers
#Opensource
 View Only
  • 1.  Open Source Vulnerability and Dependency Code Scans

    Posted 11/04/22 10:02 AM

    ITSS requires (among other things) open-source vulnerability and dependency code scans using one of the CISO-approved scanning tools (see https://pages.github.ibm.com/ciso-psg/main/standards/itss.html).

    Is this being done for the Toolbox rpm's (https://www.ibm.com/support/pages/aix-toolbox-open-source-software-overview doesn't say one way or the other)? If so, what scanning tool is being used?



    ------------------------------
    Erich Wolz
    ------------------------------

    #AIXOpenSource


  • 2.  RE: Open Source Vulnerability and Dependency Code Scans

    Posted 11/06/22 08:55 AM
    Just so you know, that CISO link is only available to IBM employees.

    -- 
    Stephen L. Ulmer
    Enterprise Architect
    Mainline Information Systems