Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Continuous Integration and Development, and related technologies.

CI/CD Pipeline Security 101

In our previous post, we discussed the recent security incident at Codecov and the following investigation at Mattermost. As a follow-up to that we wanted to share some of the basic design principles as well as a handful of more technical tips and tricks around CI/CD pipeline security that helped Mattermost come out of the incident unscathed.

Collision 2021 - Securing Software Pipelines with Continuous Packaging

Building automation and security into software supply chains requires packaging source code, dependencies and containers into logical, versioned units. But, in 2021, how engineers package their software is more vital than ever, requiring a serious refresh with a name befitting its focus on security within the cloud. We call it Continuous Packaging. Now on-demand, watch our talk from Collision Conference 2021 where we explored Continuous Packaging and how it can help secure your delivery pipelines, from development through to deployment.

JFrog Artifactory Terraform Provider Gains Xray Functionality

A few months ago, I was asked if I wanted to develop an open-source Terraform provider. Eleanor Saitta, principal at Systems Structure Ltd, had a client who was setting up JFrog Xray across their Github repositories but didn’t want to configure each repository by hand. As an SRE who enjoys working on projects that automate away those sorts of pain points (and someone who works extensively with Terraform during their day job), this sounded like an interesting project to work on.

Sleuth + SOC 2 Type II: Our constant commitment to security

‍In Sleuth’s continuing efforts to help our customers to deliver faster and safer, we have always put security as a top-level business priority. Security and privacy of our customers’ data is always in the forefront of our design, development, and deployment concerns. We understand the level of trust our customers put in us when they connect key systems together with Sleuth.

3D-printed, Sleuth logo UNBOXING

Andy, a regular viewer of Don's dev-focused Twitch streams, created a 3D-printed, 100 LED RGB Sleuth logo, and this is its unboxing. Don and Andy also get it working, connected to the internet, then Don extends his Twitch chat bot to allow viewers to change the logo's lights. The stream finishes with Don hooking the logo up to Twitch follow events so that when a viewer starts following, the logo lights up. This video is a lightly edited from the original Twitch stream. Huge thanks to Andy for building and sharing such a cool project!