Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Continuous Integration and Development, and related technologies.

Supply Chain Security Workshop

More and more attacks are aimed at the entire supply chain, which means that we developers are increasingly targeted by the attackers. Attacks like the SolarWinds hack show us that making sure you don’t use vulnerable dependencies isn’t enough. The attackers have their sights set on the entire development process with its components. In this workshop, we will look at the first steps and try them out in practice which will enable you to integrate the topic of security into your everyday life as a developer.

Tour Terraform Registries in Artifactory

Why should you keep Terraform module, provider, and backend registries in a binary repository manager like Artifactory? Because, like your builds, packages, and other artifacts, your Terraform files are a key part of your software supply chain. Terraform is a widely used open source infrastructure-as-code (IaC) software tool to manage the entire lifecycle of cloud service infrastructure.

Run self-hosted CI jobs in Kubernetes with container runner

Container runner, a new container-friendly self-hosted runner, is now available for all CircleCI users. Self-hosted runners are a popular solution for customers with unique compute or security requirements. Container runner reduces the barrier to entry for using self-hosted runners within a containerized environment and makes it easier for central DevOps teams to manage running containerized CI/CD jobs behind a firewall at scale.

Introducing the New Snyk App for Bitbucket Cloud

This post is authored by Marco Morales, Partner Solutions Architect, and Sarah Conway, Director of Partner Marketing, at Snyk. We're excited to announce a new Snyk App for Bitbucket Cloud. Snyk first announced this integration in June 2021, which brings Snyk scan results into the Bitbucket Cloud environment so you can identify vulnerabilities as they emerge, right next to the code in your everyday workflow.

Turo's approach to reliability with real-world objects ft. Avinash Gangadharan

What reliability factors does Turo have to consider when it comes to transportation and real-world objects? Avinash Gangadharan, CTO of Turo, joins Rob to discuss the complexities involved in managing software for a car sharing marketplace. He shares valuable strategies and mindsets Turo has adopted to become the leader of their industry. You’ll learn how using your own product can give meaningful insights into what matters most for the user experience.

Enterprise Package Management for Everyone

Suppose you asked developers in the mid-2000s how they managed and compiled their binaries. You’d probably hear some anxiety-inducing answers (e.g., storing packages in git repositories or insecure file stores). Thankfully, organizations currently have various options for managing their first or third-party packages, dependencies, and containers.

We're listening! Leveling up how we gather, review, and respond to product feedback.

The Bitbucket Cloud (BCLOUD) project is an invaluable source of customer-requested product features, enhancements, and suggestions. As Bitbucket Cloud has continued to grow, we’ve built up quite a backlog! To streamline the process, we recently implemented an in-product form as a replacement for manual issue submission. Entering feedback about Bitbucket Cloud is now easier than ever!

Using External Dependencies with Conan @ Bay Area C++ User Group Meetup

In the 2022 C++ survey results an overwhelming majority ~80% said managing libraries was painful, nearly 50% called it a major pain. Given this is not even a conversation in another ecosystem, it’s time we solve it once and for all. This talk will give an introduction to Conan and focus on the latest features you can use today to overcome any challenges. You’ll learn how to work on a CMake project, use different generators, and take advantage of multi-config presets. The goal is you give you a clear picture of how Conan fits into your existing workflow.