Operations | Monitoring | ITSM | DevOps | Cloud

January 2023

GitHub Tried to Change the Checksum for Release Archives. You Should Start Hosting Your Own.

Yesterday, GitHub changed how the archives they provided are made. The result of this change surprised developers, triggering pipeline failures all over the world in most ecosystems. According to this GitHub post, this is a consequence of recent changes to Git itself, released almost six months ago and just deployed within GitHub now with unforeseen impact. This change has thankfully been retracted.

Webinar: State of DevOps | A Look Ahead at 2023

“DevOps” has never been more popular than it is today; it seems to be on the top of everyone’s minds and constantly evolving. So what can we expect to see in terms of trends for 2023? Join us as we continue our December conversation and discuss our predictions for DevOps and Software Supply Chain Security for the year ahead with community leaders. We will delve into some common and not-so-common opinions and topics you are likely to hear more and more about as the year progresses.

What Is A DevOps Pipeline? A 2023 Beginner-Friendly Guide

Did you know that Google Search changes how it works about 12 times daily? For example, the internet search giant made about 4,500 changes to Search in 2020 alone. Those changes involved running more than 600,000 tests. Most of us can barely tell how often Google updates because the modifications are subtle. But we can tell that something keeps improving. Many other leading tech solutions do the same, from your tiniest mobile app to big ol’ Apple products.

GitOps The Planet #6 - K3s, Rancher, and now Acorn - Dev Productivity Nirvana with Darren Shepherd

ibuildcloud, aka Darren Shepherd, is the CTO and co-founder at Acorn Labs - a simple application development framework for Kubernetes. Before Acorn Labs, Darren was the CTO and co-founder of Rancher Labs (acquired by Suse) where he created k3s and a lot more. In this episode we'll talk about the changing developer experience landscape the effect of GitOps, k3s, and these new frameworks.

JFrog Connect IoT Device Management Solution

JFrog Connect is an all-in-one platform to manage, update, control, monitor and secure remote Linux & IoT devices, at scale, with the click of a button. New products are being developed all the time, and in today's world they are all smart, connected with complex software. Save development time with the first plug and play device management platform for connected devices - with all the necessary tools and features to manage and maintain the product fleet remotely. Including over the air update tools, remote debugging, monitoring and securing.

CircleCI New Feature: An Overview of Container Runner

As many enterprises start to scale utilizing CircleCI’s cloud offering, due to the need for privileged access & controls and unique compute requirements for some jobs, we launched self-hosted runners. Self-hosted runners enable engineering teams to use their own infrastructure for running jobs. A machine runner executes each job with a one to one mapping between a job and a VM launched in the same environment as the machine runner binary.

Get in Front of Delivery Risks by Managing Work in Progress: Turn Your DORA Metrics into Trip Wires

In this live stream on Thursday, January 19 at 1pm PT, learn how Sleuth's new Work in Progress Metrics feature helps you:‍ Sleuth gives software development and engineering teams the most complete and accurate visibility into DORA metrics across your organization and projects. Work-in-progress metrics can also be helpful for communicating execution status to stakeholders, and for tracking if improvement initiatives being implemented are making a difference.

Introducing Project and Workspace Access Tokens

A few months ago we introduced Repository Access Tokens which were the first of the new resource-based authentication methods we are introducing to Bitbucket Cloud. Repository Access Tokens enable a convenient, yet secure way to manage access for users to a specific repository. While repository access tokens enable you to allow you to control access at a granular level, they are not scalable.

Optimizing Build Time and Getting Results Using Test Splitting

As many enterprises start to scale utilizing CircleCI’s cloud offering, due to the need for privileged access & controls and unique compute requirements for some jobs, we launched self-hosted runners. Self-hosted runners enable engineering teams to use their own infrastructure for running jobs. A machine runner executes each job with a one to one mapping between a job and a VM launched in the same environment as the machine runner binary.

How to Preview and Diff Your Argo CD Deployments

Adopting Kubernetes has introduced several new complications on how to verify and validate all the manifests that describe your application. There are several tools out there for checking the syntax of manifests, scanning them for security issues, enforcing policies etc. But at the most basic case one of the major challenges is to actually understand what each change means for your application (and optionally approve/reject the pull request that contains that change).

Integrating Cloudsmith with Your Roadie Developer Portal

Customers can now integrate Cloudsmith with Roadie, letting users monitor key Cloudsmith data within the Roadie developer portal. Cloudsmith has just announced an exciting new integration with Roadie, a start-up that provides SaaS for Backstage, a service catalog open-sourced by Spotify that automatically tracks your microservices. Organizations use Roadie to build a software catalog and developer portal for internal systems, centralizing information in one convenient location.

Efficiently Managing Multiple Environments Using GitLab CI

GitLab CI is a powerful tool for managing the software development and deployment process. It allows you to define and automate build, test, and deployment pipelines and provides features such as version control, collaboration, and continuous integration. However, while GitLab CI is an excellent tool for managing a single environment, it can have some limitations when it comes to managing multiple environments, especially dynamic environments.

JFrog Quick Tip How to install and connect the JFrog CLI

With the JFrog CLI, you have access to the functions of the JFrog Platform, such as Artifactory and Xray. In this way, for example, the extended security functions of Xray can be made available directly in a terminal on a laptop. In this quick tip, I will show you where to get the JFrog CLI, install it and connect it to your platform. This works with the free tier, the Enterprise Trial, and all other subscriptions and on-prem installations.

A Fully Argo-Based Ecosystem For Continuous Delivery and Deployment

Better DevOps makes for more efficient engineering teams and more reliable releases, and when it comes to DevOps, it doesn’t get better than GitOps. According to DevOps-As-A-Service: One of the many goals of DevOps is to reduce Time To Value (TTV) and to provide faster feedback while enabling developers to easily self-service or not have to engage to get a service at all.

Critical Metrics and Alerts in the Continuous Delivery Process

Continuous delivery is a software development approach in which code changes are automatically staged for production release. A foundation for modern application development, continuous delivery extends continuous integration by automatically deploying code changes to test and production environments after the build phase. When properly implemented, developers have deployable build artifacts that have passed a standardized testing process and can be deployed to environments as needed.

Puma + Sleuth = The Swiss Army Knife of Deployment Pipeline Orchestration

Michael Gaskin from Puma and Dylan Etkin from Sleuth discuss how Michael's team uses Sleuth to orchestrate its entire deployment pipeline and show engineering value, specifically for a major engineering initiative -- moving from a monolithic packaged software system to a new headless front end commerce solution.