What's your favorite tool or method of securing 3rd party packages against vulnerabilities, "supply chain attacks", and malicious packages in a #dotnet, #javascript and #Docker / #Kubernetes setting?
Is it #Snyk, #FOSSA, #SonarQube / #SonarCloud, or something else entirely?
Boosts and recommendations highly appreciated. 🙏
@joelving @rheckart #JetBrains has Qodana, which partners with Checkmarx.
We also recently have a self-hosted option and 40% off for a limited time.
https://www.jetbrains.com/help/qodana/vulnerability-checker.html
Following successful Beta tests with some of our clients, we’re now launching the first release of Qodana Self-Hosted, allowing you to manage, maintain, and upgrade our code quality platform entirely on your end.
Peter Toft Jølving
Rob 
Khalid ⚡