2 years ago

Category: Software, Security, Data, github, gitlab, automation, shell, bitbucket

Software supply chain management and security tooling company Sonatype has released Sonatype Lift, a deep code analysis platform that gives developers the ability to scan for a wide range of bug types and code issues. The launch follows the company’s acquisition of code analysis platform MuseDev earlier this year, and Stephen Magill, formerly MuseDev CEO and now vice president of product innovation at Sonatype, says that Lift is a combination of the technology originally developed at MuseDev with software composition analysis capabilities that were already in development at Sonatype.

in that area, and, for some of these capabilities, that’s sort of expertise you need to really get the most out of the tool and get it up and running in the optimal way.

But it really is something that most Java teams that you talk to, they would prefer to have that in there and have that enforced,” explained Magill.

Lift is available both as SaaS and as on-prem for Sonatype users, and Magill said that the next steps for Lift are to make sure it works well for Sonatype’s enterprise users.