Securing your software supply chain begins with knowing what’s in your code. With AI-generated code and ubiquitous open source software use, it’s never been more critical to understand what risks your software may contain. In fact, last year alone we found that 84% of codebases contained at least one open source vulnerability.

In this Techstrong Learning Experience, we’ll explore the findings from the Synopsys 2024 “Open Source Security and Risk Analysis” report. We’ll cover:

• The state of open source software security
• Tips for mitigating risks and keeping vulnerabilities out of your supply chain
• How to protect against security and IP risks from AI coding tools

• 2024 Open Source Security and Risk Analysis Report - https://www.synopsys.com/software-integrity/resources/analyst-reports/open-source-security-risk-analysis.html
• A Guide to CISA’s Six Types of SBOMs - https://www.synopsys.com/software-integrity/resources/ebooks/cisa-sboms-guide.html
• Contact Synopsys - https://www.synopsys.com/software-integrity/contact-sales.html