Introducing a Better Way to SCA for Monorepos and Bazel

Endor Labs has announced support for Bazel, a widely-used build system for projects in monorepos and across multiple programming languages, which allows for the analysis of security and operational risks in software built with Bazel, including native rules for Java, Python, and Golang. Bazel helps improve development productivity by speeding up build processes with parallel builds and caching, and ensuring reproducible builds that prevent unintentional changes. Despite its advantages, Bazel presents challenges for software composition analysis (SCA) tools, as many do not fully support Bazel or the multiple languages it can manage, leading teams to create inefficient workarounds. Endor Labs addresses these issues by enabling selective and efficient scanning of Bazel targets, aligning with Bazel's philosophy to only scan what is necessary, thereby saving time and resources. This approach allows monorepo teams to conduct more accurate and efficient analysis, maintaining productivity without sacrificing security or compliance.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.