Open-source security is a mess - IBM and Red Hat bet $5 billion and 20,000 engineers can fix it

Project Lightwell is an AI‑powered initiative to find and fix vulnerabilities in open-source software at an industrial scale. Here's what we know so far.
Developer Tech

IBM and Red Hat commit $5bn to secure open-source software

IBM open-source security project Lightwell will use AI tools and over 20,000 engineers to help secure enterprise open-source software.
InfoWorld

IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise

The $5 billion Project Lightwell initiative combines AI systems with 20,000 engineers to deliver validated fixes directly ...
InfoQ

Google Veles is a New Open-Source Secret Scanner Powering GCP

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...
SecurityWeek

Open Source DockSec Uses AI to Cut Through Vulnerability Noise in Docker Images

DockSec correlates findings from container security scanners and uses AI to generate remediation guidance and exact Dockerfile fixes.