Operations | Monitoring | ITSM | DevOps | Cloud

CI CD

The latest News and Information on Continuous Integration and Development, and related technologies.

How to build a team that demands metrics

When we talk about metrics in software delivery, a lot of developers think of execution metrics — things like throughput, delivery and number of deploys. But in reality, those metrics don’t motivate anyone — at least not without connecting them to a bigger picture. I’ve worked in software for 23 years. I’m a three-time founder and four-time CTO, responsible for leading a 200+ member distributed engineering organization.

2021 swampUP Technical Announcements in Just 8 Minutes

swampUP is where JFrog reveals the following year's roadmap and direction. But if you don't have time to watch the whole keynote, take 8 minutes and see all about the world's first Private Distribution Network (PDN) and Binary Lifecycle Management solutions. Includes PDN, Signed Pipelines, Federated Repositories, third-party dependency scanning, Cold Artifact Storage and more. Drawn from the technical keynote at swampUP in May 2021.

Going Beyond Exclude Patterns: Safe Repositories With Priority Resolution

You probably remember the Namespace Shadowing a.k.a. “Dependency Confusion” attack that was in the news a couple of weeks ago. I blogged back then about the Exclude Patterns feature of JFrog Artifactory which we’ve had forever and was always intended to protect you against those kinds of attacks.

The Confident Commit | Episode 3: Taming infrastructure with HashiCorp's Armon Dadgar

CircleCI CTO and host of The Confident Commit podcast Rob Zuber is joined by HashiCorp co-founder and CTO Armon Dadgar for a conversation about the inspiration of HashiCorp, infrastructure challenges and opportunities, and the future of security. Listen along for the insight story of HashiCorp's origins and early days, as well as keen insights for managing infrastructure and ways to better deliver software to infrastructure environments from two of tech's top leaders.

Reducing flaky test failures

Testing is vital because it helps you discover bugs before you release software, enabling you to deliver a high-quality product to your customers. Sometimes, though, tests are flaky and unreliable. Tests may be unreliable because of newly-written code or external factors. These flaky tests, also known as flappers, fail to produce accurate and consistent results. If your tests are flaky, they cannot help you find (and fix) all your bugs, which negatively impacts user experience.

Signed Pipelines Build Trust in your Software Supply Chain

Trust isn’t given, it’s earned. As the Russian proverb advises, Доверяй, но проверяй — or as U.S. President Ronald Reagan liked to repeat, “Trust, but verify.” We designed JFrog Pipelines to securely support a large number of teams, applications, users and thousands of pipelines.

Adding IaC security scans to your CI pipeline with Indeni

With CircleCI, there are many different CI/CD flows that can be automated. One such flow is the use of Infrastructure-as-Code (IaC) to build cloud environments. For example, you can use CircleCI to automate the process of building Terraform plans and applying them, in order to create massive production setups in AWS, Azure, GCP, and other cloud environments.