Google, IBM and others launch an open-source API for keeping tabs on software supply chains

 Thanks to containers and microservices, the way we are building software is changing. But you probably still want to know who built a given container and what’s running in it. To get a handle on this, Google, IBM and others today announced Grafeas, a new joint open-source project that provides users with a standardized way for auditing and governing their software supply chain. Read More