Operations | Monitoring | ITSM | DevOps | Cloud

For CFEngine we manage several public and private repositories of code in GitHub for our Open Source and Enterprise products. In order to ensure quality we run many checks on the code both with nightly builds as well as on each pull request. We use a Jenkins server for nightlies which also includes more extensive deployment tests on all of the platforms we support. Previously we had used Travis for many of these checks but that system started to show its age and limitations.

Software development, DevOps has emerged as a game-changer. It’s not just a buzzword; it’s a cultural and technological shift that allows organizations to accelerate their software delivery while maintaining high quality and reliability. However, successful DevOps implementation is not merely about adopting a set of tools or following a predefined set of rules. It’s a holistic approach that requires a deep understanding of key principles.

Don: The debate is over - how should you structure your software teams? That question is now answered in this year's State of DevOps report 2023. Other questions answered include: How does AI affect my company and team performance? How can we quantify the impact of culture on performance burnout? What even is culture in the first place? All these things are included in the State of DevOps report 2023. We have a very special guest, Eric Maxwell from the DORA group, to offer his takes on the report.

Our 1st blog in our series on securely consuming OSS. Today, I'll give an overview of some of the most common types of attacks from consuming OSS. Open-source software (OSS) fuels innovation. Over 96% of commercial applications rely on at least one OSS component (Synopsys, 2023). At Cloudsmith, we champion OSS and understand its indispensable role in today's software landscape. However, the escalating threat of supply chain attacks targeting OSS demands a robust defence.