Introducing: Open Source Manager, CSAF/VEX, Complex SBOM Manager, Security Assessment Report

June 11, 2024

‍

New Feature: Open Source Manager

There is an exponential increase in usage of open source components. In fact, more than 90% of companies use open source. The risk introduced into the applications through open-source dependencies surpasses the risk generated by the private code by 10x. Lineaje’s Open-Source Manager (OSM) provides transparency for these sourced components, actively managing and mitigating the risks they pose to your organization. OSM offers enterprise-grade open-source governance tailored for complex organizations.

‍

Easy, unobtrusive discovery of your open source: Start with an unobtrusive scan - containers, images, source code or artifactory, - and OSM illuminates your direct open-source dependencies and their comprehensive supply chain tree automatically.
AppSec for Open-Source - OSM serves as AppSec for open-source components by automatically assessing each component for risks such as vulnerabilities, licenses, code quality, security posture, maintainability, age, supplier, provenance, and more.
Free your developers and drive innovation – OSM enables evaluation of every open source component that matches enterprise criteria like upgrades, fixes, and EOL. This allows developers to freely pick open source components.
Plan Better, Save Resources, with Lineaje AI - Lineaje AI, using BOMbots, builds SMART “What-If” PLANS in minutes. Choose the SMART PLAN that works best for you and save maintenance efforts upto 40%.
Attested provenance for trustability & integrity - OSMs advanced fingerprinting technology determines the integrity of each component and application. OSM identifies components with fully validated provenance, tamper prone components, components of dubious origin or geographies, and more.
Make the impossible vulnerability fixes possible - 95% of all vulnerabilities come from open-source and 56% of them are never fixed. Your developers cannot fix them, but we can! We eliminate vulnerabilities with our “OSS remediation as a service”.

‍

New Feature: CSAF/Vex

Lineaje now supports the import and export of CSAF/Vex documents. This allows software consumers to apply any mitigations for vulnerabilities published by software producers. The process involves:

‍

Re-assessing the Project: Mitigations are applied, and findings are recalculated to update the IRL (Inherent Risk Level) scores.
Real Risk Evaluation: Helps consumers evaluate the actual risk of using a particular component.
CSAF Template Generation: Software producers can use the search feature to generate a CSAF template for their software or specific vulnerabilities. This template can be updated with detailed vulnerability analyses and shared with customers.

These new features enhance Lineaje’s capability to secure software components and provide a clearer understanding of the associated risks and mitigations.

‍

New feature: SBOM Manager for complex projects

The development strategy of source code varies from organization to organization. Often, related projects may not exist together. From a SBOM management point of view, it is important to group complex projects together. The related projects may belong to different language/ package managers. For example an application project can have the nodejs ui code, along with the java backend code.

Lineaje CLI has the added ability to detect the related projects and group them together. This gives the customers the ease-of-use to handle complex projects.

‍

New feature: Security Assessment Report

Security Assessment Report prove as an excellent way to show the risks associated with each component in a software product. Lineaje enables generating security assessment reports for any project. The report contains all the dimensions of data associated with the project like vulnerabilities, security posture, code quality, suppliers, licenses, dependency tree etc. The report also contains the attestation and Inherent Risk Levels of all components. The Report also includes AI generated recommendation to reduce vulnerabilities.

Security Assessment Reports can be generated ta a project level (Project’s page) or at an organization level (Dashboard)

‍

Lineaje FeatureHub

Introducing: Open Source Manager, CSAF/VEX, Complex SBOM Manager, Security Assessment Report