Operations | Monitoring | ITSM | DevOps | Cloud

April 2023

Part II: A Journey of a Thousand Binaries - The Challenges with Software Dependencies

In part one of this series, we looked at what is a dependency, different types of dependencies, and their benefits in our code. In part two, we’ll look at the risks of using dependencies. Whenever we add a dependency we are increasing the risks of any software development cycle.

Static credential management for platform engineers

Cloud CI/CD is a force multiplier for development teams, especially those working remotely. Automated CI/CD takes load off of developers, allowing them to focus on building better products. Hosted CI/CD adds further benefit to this, ensuring that this newfound capacity isn’t spent managing the testing and deployment infrastructure, and that remote team members have easy access to CI/CD tools.

Monitor your TeamCity builds with Datadog CI Visibility

As the complexity of modern software development lifecycles increase, it’s important to have a comprehensive monitoring solution for your continuous integration (CI) pipelines so that you can quickly pinpoint and triage issues, especially when you have a large number of pipelines running.

SLSA 1.0 is here! What's it mean for you?

Any organization that has taken on the daunting task of securing their software supply chain knows the challenges, pitfalls and caveats that come with implementing security best practices. SLSA 1.0, a community-backed framework that provides a comprehensive checklist of security controls and standards, is here! So what does it mean for you and your organization? This session gathers SLSA experts from across the industry to discuss the practical uses of the framework.

GitOps The Planet #10: Demystifying SBOMs and Their Impact on CI/CD Software Delivery

Before cloud-native controlling components delivered was in some ways "easier" in that ops teams could limit which components were available on nodes. With containerization, the ops problem became harder while the dev side became easier. Now SBOMS (software bill of materials) are becoming critical to software supply chain risk management. In this episode, GitOps the Planet Alum, Christian Hernandez will join to walk us through SBOMS, how we should be using them, and how they help improve software security.

DevOps is dead? Nope, it is maturing ft. Jesse Robbins of Heavybit

In this episode, Rob sits down with the DevOps “party starter” himself, Jesse Robbins, to discuss the current state of software delivery. Is DevOps really dead, or are we simply witnessing a maturing model as organizations grow and evolve? Tune it to hear Jesse’s valuable take on where he sees the industry moving and the potential complexities on the horizon.

Improve engineering teams faster with DORA metrics

We talk with numerous teams that want to improve their engineering performance. Here, we explain how to accelerate your progress using DORA metrics — a set of key performance indicators that can help you measure and optimize your team's software development process. You'll learn practical tips on how to leverage these metrics to achieve faster and more efficient team improvement. But first, you'll need your team to see the value in DORA metrics.

Optimize your CI/CD Pipeline with Coralogix Tagging

Continuous Integration/Continuous Delivery (CI/CD) has now become the de-facto standard for all engineering teams seeking to keep pace with the demands of the modern economy. At Coralogix, we operate some of the most advanced build and deploy pipelines in the world. We’ve baked that knowledge into our platform with a CI/CD Observability feature called Coralogix Tagging.

Unhealthy code? Don't rely on customers to tell you

Does your software deployment process require that someone on your team manually checks different dashboards to verify that everything's okay? Do they actually do that when they deploy? Do you rely on customer complaints to notify you when something's wrong? There's a better way: Sleuth CTO and co-founder Don Brown shows you how to track several health measures automatically in Sleuth.

AMA: Achieving code reliability across the release cycle

Code coverage, arguably a very important measure that we as development teams don’t pay enough attention to. That is until Sentry notifies you of a frustrating/critical/oh s*#t moment. Then we all think: “how could this have been avoided?”, “why didn’t our tests catch it?”, “oh… we didn’t have any coverage on this flow.” With our new Codecov integration, you can avoid regressions (and awkward conversations) by being able to see which lines that caused an issue are covered and which ones are not - right in the stack trace we kick out on every error report.

CircleCI config policies: A tale of empowerment and control

If you’ve worked in a large, security-minded organization, you know how developers’ need for speed often clashes with the organization’s need for security. Often this conflict erupts into a high-stakes battle between two teams with very different priorities and perspectives. Ok, it may not always be so dramatic, but the challenge of control and empowerment is very real.

CircleCI Technical Demo + Q&A

Join us for a high level tour of CircleCI, and learn how to most effectively utilize the platform’s features and capabilities. Every first and third Wednesday, we’ll be offering a technical demo so you can learn best practices and have all your CircleCI questions answered. Topics Covered: How it works: the nuts and bolts of the product Why CircleCI can make developers’ jobs easier and more rewarding How CircleCI can support your security posture by ensuring organizational policies and guardrails are met Greater visibility by surfacing trends and status across your organization

Deploy a Dockerized Go application to Azure

As a software engineer, one of your goals is to ensure that your product can be accessed globally by your customers. It’s not enough that an app is bug-free and works flawlessly if it only works on localhost. Docker was introduced to solve the “it works on my machine” problem. For example, the particular version of a programming language a developer is using on Windows or MacOS may not be working on the hosting server.

IoT Management 101 with JFrog Connect - Workshop

There are more than 12 billion IoT devices globally, and IDC estimates 41 billion by 2025. IoT includes connected smart devices like industrial robots, retail kiosks, security cameras, and maker devices using Raspberry Pi (RPi). Managing IoT into real-world production can be challenging to scale and manage. JFrog Connect is a complete solution for updating, monitoring, managing and troubleshooting Linux-based devices globally.

Pulse-check your engineering team performance

If you're being asked to do more with less on your software engineering team, you need to be able to see at a glance how your team is doing. Are you deploying at a consistent rate? What's your lead time for changes? Where are your bottlenecks? Our CTO, Don Brown, shows how we take a pulse of our performance at Sleuth using DORA metrics.

Why using the "one Docker image to rule them all" is probably a terrible idea.

Dan's last tutorial "Learn how to make the LAST Docker image you'll ever need" was a very successful April Fools joke. Perhaps too successful. In this video Dan does the tutorial in reverse and explains exactly why "one Docker image to rule them all" is probably a terrible idea.

Building Bitbucket Cloud for enhanced security, compliance, and scale

With support for Bitbucket Server ending in February 2024, we're seeing more and more of our enterprise customers moving their code to the cloud. To enable a smooth migration to cloud for our Bitbucket Server and Data Center customers and to enable our existing cloud customers to scale, we are continuing to build features around security, compliance, and scale in Bitbucket Cloud.