IBM's Bob DevSecOps package checks agent edits and package installs before they hit disk
IBM's Bob Premium Package for DevSecOps screens agent-proposed file edits and install commands before they land, swaps known-vulnerable dependency versions for fixed ones, and adds an advisory /review on GitHub pull requests from November, with the merge left to a person. On IBM i, run Bob's PASE and open-source work (Node.js, Python, yum packages) through that gate, and keep RPG and CL changes moving through source control and a named reviewer, because a dependency scan does not decide who can change objects in production.
Built In.
The best of the log, every two weeks. One idea, one proof, one next step.
Built In.
The best of the log, every two weeks. One idea, one proof, one next step.
References do not imply endorsement. The link goes to the original source; the words are ours. Silver Lake Financial Group and Alder & Pine Home, where mentioned, are fictitious demonstration companies.