Snyk Helps Secure the Golang Bento Project
Blog post from Snyk
Snyk, a developer-first security platform, has been exploring the use of the open-source Golang project Bento to read data from Kafka streams and materialize intelligence. Snyk is proactively contributing dependency fix updates to secure the Bento project, specifically addressing a vulnerability in the golang.org/x/crypto/ssh library that can be exploited for denial of service attacks. This contribution demonstrates Snyk's commitment to securing open-source projects and has been accepted by the Bento maintainers. Additionally, Snyk has launched its Secure Developer Program, which invites open-source project maintainers to connect their projects to Snyk and receive enterprise-grade security features. A new report on the State of Open Source Security is also available, highlighting the biggest challenges in open source security today.