Скачать или смотреть General Availability of Endor Labs Integration - Azure Daily Minute Podcast - 16-DEC-2025

-

#CloudSecurity #CSPM #JohnLewisAzure #AzureDailyMinute #EndorLabs #NPM #JavaScript

--
General Availability of Endor Labs Integration
NPM retires classic tokens and introduces session-based authentication

Hello, this is John Lewis, and welcome to your Azure Daily Minute for Tuesday, December 16th, 2025.

Defender for Cloud's integration with Endor labs is now generally available. As published, on December 1st, Defender for Cloud's integration with Endor Labs enhances vulnerability analysis by using reachability-based Software Composition Analysis (SCA), which shows exploitable vulnerabilities from code to runtime. Reachable vulnerabilities are security flaws that exist in open source dependencies that have a direct and exploitable execution path. These vulnerabilities are high risk and can be actively triggered within a application current flow and then exploited by malicious actors.

Endor Labs is a security platform that focuses on the identification and mitigation of vulnerabilities in partner dependencies within software applications.

https://learn.microsoft.com/en-us/azu...

Node Package Manager permanently revoked all classic tokens and introduced session-based authentication and CLI token management tools. Node Package Manager, or NPM, is the default package manager for the popular JavaScript runtime Node.js. Classic tokens were long-lived authentication credentials that remained valid indefinitely once created. GitHub permanently revoked all existing classic tokens, replacing them with a session-based authentication system where a NPM login creates two-hour session tokens that automatically expire and require reauthentication.

This, and other changes, protect the entire JavaScript ecosystem while maintaining the workflows customers depend on.

That wraps up the Azure Daily Minute for Tuesday, December 16th, 2025. Until next time, take care and go build great things!

More Information:
https://learn.microsoft.com/en-us/azu...
https://github.blog/changelog/2025-12...

   • Azure Daily Minute Playlist