#AskSleuth Elasticsearch: problem solver or trouble maker?
Elasticsearch it's a powerful search engine, but do you know what it takes to tame that beast? On this episode of #ASKSLEUTH, Don Brown from Sleuth.io answers your questions.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on Continuous Integration and Development, and related technologies.
Featured Post
How should start-ups court software talent?
There is a game of 'speed dating' going on between technology businesses and the software engineering talent that bring amazing solutions to market. In recent years big tech companies, expanding aggressively in Europe, have competed ferociously with locally headquartered tech startups for the best software engineers. These engineers are in short supply. A government-supported Tech Nation report disclosed that 10 per cent of all UK job vacancies were in tech. The report suggested that at current growth there could be 100,000 job openings per month before the end of June this year.
CI/CD Pipeline Security 101
In our previous post, we discussed the recent security incident at Codecov and the following investigation at Mattermost. As a follow-up to that we wanted to share some of the basic design principles as well as a handful of more technical tips and tricks around CI/CD pipeline security that helped Mattermost come out of the incident unscathed.
Collision 2021 - Securing Software Pipelines with Continuous Packaging
Building automation and security into software supply chains requires packaging source code, dependencies and containers into logical, versioned units. But, in 2021, how engineers package their software is more vital than ever, requiring a serious refresh with a name befitting its focus on security within the cloud. We call it Continuous Packaging. Now on-demand, watch our talk from Collision Conference 2021 where we explored Continuous Packaging and how it can help secure your delivery pipelines, from development through to deployment.
Editing Pull Requests just got a little easier
Bitbucket Cloud’s code review experience is highlighted by the pull request view – a central place to view and discuss proposed changes, create actionable tasks from discussion, and reach a consensus on the changes making their way to your codebase.
How We Improved Our DB Sync Performance | JFrog Xray
We all want to develop everything super fast. So, when something like a “simple” database sync process takes ages, we need to think outside the box. Here are the solutions we implemented, in JFrog Xray, to improve our DB performance, reducing the sync time from 16 hours to 2 hours!
Using Harness to deploy packages from Cloudsmith
A short demo of how you can use Harness CD to deploy a docker image from a private Cloudsmith repository to an AWS ECS Cluster.
JFrog Artifactory Terraform Provider Gains Xray Functionality
A few months ago, I was asked if I wanted to develop an open-source Terraform provider. Eleanor Saitta, principal at Systems Structure Ltd, had a client who was setting up JFrog Xray across their Github repositories but didn’t want to configure each repository by hand. As an SRE who enjoys working on projects that automate away those sorts of pain points (and someone who works extensively with Terraform during their day job), this sounded like an interesting project to work on.
We are rolling out Docker v20 to Pipelines in June 2021
Docker v20 was officially released a few months ago, bringing new features that will make your builds faster and more secure. We will be progressively rolling out the new version to Bitbucket Pipelines throughout the month of June 2021.
Automatically Assess and Remediate the SolarWinds Hack
With software supply chain attacks on the rise, are you wondering how you can recover quickly from the recent SolarWinds breach at your company? Months after its discovery, the devastating SolarWinds hack remains a top concern for business, government and IT leaders. This destructive supply chain attack put the spotlight on software development security — a critical issue for the DevOps community.