Operations | Monitoring | ITSM | DevOps | Cloud

CI CD

The latest News and Information on Continuous Integration and Development, and related technologies.

Understanding Zero-Day Vulnerabilities in Software Supply Chain

A Node.js module with nearly two million downloads a week was compromised after the library was injected with malicious code programmed to steal bitcoins in wallet apps. Join us as we delve into a real-world zero-day supply chain attack. Understand the response that followed, and how attacks like this can be mitigated. Learn from David Gonzalez, Principal Engineer at Cloudsmith and Member of the Node.js security working group, as he walks us through the incident.

Deploy a Node app on AWS EC2 Linux

Amazon Web Services (AWS) provides a vast ecosystem of products that make DevOps an absolute dream. Products like AWS Elastic Beanstalk have ready-made services for autoscaling, deployment, and logging (to name a few). However, teams may prefer to take a barebones approach and build incrementally - in which case AWS Elastic Compute Cloud (EC2) would be the preferred option.

DevOps Automation and DevOps Best Practices

In the dynamic landscape of software development, the adoption of DevOps has become a cornerstone for organizations aiming to deliver high-quality products at a rapid pace. DevOps, a fusion of development and operations, emphasizes collaboration, communication, and automation throughout the entire software development lifecycle.

New in pull requests: Batched comments

Bitbucket Cloud is excited to introduce a new feature to streamline the way you communicate pull request feedback to your colleagues. You now have the option on pull requests to batch comments into a single review. By doing this, you submit all your feedback at once, letting other PR participants know – with a single email notification – that you have finished your code review.

Forget Inbox Zero, try PR Zero!

Pull requests are 99% waiting, and therefore waste, so in this video, you learn how to use Sleuth automations to minimize waiting and get back to doing real work. Give Sleuth a try and see how we give teams actionable insights on how to improve with no-code automations to instantly ship improvements, and metrics to measure their impact — all in a way that both managers and developers love.

Try PR zero

Pull requests are 99% waiting, and therefore waste, so in this video, you learn how to use Sleuth automations to minimize waiting and get back to doing real work. Give Sleuth a try and see how we give teams actionable insights on how to improve with no-code automations to instantly ship improvements, and metrics to measure their impact — all in a way that both managers and developers love.

Creating Ephemeral Environments for CI/CD Pipelines with Kubernetes

In the swiftly evolving tech world, the need for agile and efficient development processes is paramount. This was the essence of our enlightening event, "Creating Ephemeral Environments for CI/CD Pipelines with Kubernetes," which garnered an impressive turnout of over 650 attendees. The event, now available on Youtube, focused on the transformative potential of ephemeral environments in modern CI/CD pipelines.

K8s Exercise Labels and Annotations

Kubernetes, often abbreviated as K8s, has revolutionised the way we manage containerized applications. It provides a robust platform for orchestrating and managing containers at scale. One of the key features that sets Kubernetes apart is its powerful metadata system, which includes labels and annotations. In this blog post, we’ll take a comprehensive look at how labels and annotations work in Kubernetes and how you can leverage them to enhance the management of your applications.

Creating Ephemeral Environments for CI/CD Pipelines with Kubernetes and Qovery

Ever feel like your release process is a slow, clunky old car? It's time to turbocharge that machine! Join me for a fun and interactive 1-hour LinkedIn Live Event where we’ll unlock the magic of ephemeral environments to get your releases zooming along the fast lane using Kubernetes, Qovery, and GitHub Actions.