Fortify SCA is a set of software security analyzers that search for violations of security-specific coding rules and guidelines in a variety of languages.

At the highest level, using Fortify translates the source code in to an intermediate translated format, scans the translated code and produces vulnerability reports.

2. 5 advantages of Fortify SCA?
Fast and Accurate Scanning
• Static application security testing (SAST)captures the majority of code related issues early in development.
• Identify and eliminate vulnerabilities insource, binary, or byte code
• Fortify SCA detects 815 unique categories of vulnerabilities across 27 programming languages and spans over one million
individual APIs
• Accuracy as demonstrated by a true positive rate of 100% in the OWASP1.2b Benchmark

The introduction of container technologies improved the ease of developing applications. Red Hat OpenShift is one of the notable PaaS services that provides an auto-scaling cloud application platform. The platform of OpenShift is an essential improvement over the conventional application development platforms.

The demand for cloud applications is the most important reason for the increasing popularity of OpenShift. Therefore, the following article would aim at discussing the various details related to OpenShift. Subsequently, the discussion would proceed towards the Red hat variant of OpenShift. A detailed impression of these factors can help you in preparing effectively

Chef is an automation tool. It is a Configuration Management (CM) tool that lets you automate processes and tasks across numerous servers and other devices of an organization in simple steps. Such a framework is highly beneficial to a company. This automation tool eliminates the need to create complex and lengthy scripts of code, that can potentially wreak havoc in the long run. With a few clicks, you can deploy and manage software applications across all devices of your organization. 

2. 10 advantages of chef

• Chef ensures consistency. All devices of your IT organization fluidly receive the same updates, software installations and deployments.
• Chef can warrant that all your devices have unvarying states and ensure stability. 
• Speed and accuracy are essential traits to have for a successful IT organization.
• Chef enables you to deploy software and applications across your entire infrastructure using a few lines of code and some clicks on buttons.
• Integrating your infrastructure on the cloud has a lot of implications for the company.

3. How to install chef workstation?

Installation of chef workstation

wget https://packages.chef.io/files/stable/chef-workstation/22.5.923/el/7/chef-workstation-22.5.923-1.el7.x86_64.rpm

4.One example program of reciepe

file ‘/opt/first.txt’

file ‘/opt/first.txt’ do

action :delete

end

file ‘/opt/content.txt’ do

content “This is my first program of chef”

mode 755

owner root

end

Terraform is a provisioning declarative tool that based on infrastructure as a code paradigm. It helps to evolve the infrastructure safely and predictably. Terraform is a multiple purpose composition tool. It composes the multi tiers and a plugin based architecture model. It is a open source and backed by hashicorp company and hashi tao.

2. one example terraform program

resource “aws_instance” “demo” {

ami = “ami-00831fc7c1e3ddc60”

instance_type = “t2.micro”

tags = {

name = “Demo System”

}

}

3. List 5 terraform commands and its use

import – import existing infrastructure into terraform.

apply – build or changes infrastructure.

get – download and install modules for the configuration

validate – check wheather the configuration is valid.

plan – show changes required by the current configuration.

Kubernetes is a container orch which manages the multiple docker hosts. The container tools develops in Go language. Kubernetes is a open source and it was developed by google but donated to the cloud native computing foundation.

2. 5 reasons of using kubernetes

• The problem of scalability can be solved by using kubernetes.
• Transparency: if a problem occur it will be easier where to look.
• Time savings
• By using kubernetes we can config the files and version the infrastructure.
• Reliability problem can be solved by using kubernetes.

3. Kubernetes components

• kubeadm – for all components of k8 and admin tool
• Etcd – for all the services of k8
• Scheduler – Scheduler will assign the work to the workers
• Controller manager – it is used for controlling all the worker state and it controls the component that embeds the cloud specific control logic.

Docker is an application which basically does the configuration of namespaces and the Cgroups of the linux underthhood . Docker is used to create images of the application which can be analogous to classes in OOPs and containers which is created are like objects of the class. Multiple containers can be created from the docker image

2. What is container ?

Container are the runtime instances of the docker image .

docker ps : To get the list of running containers

3. What are 5 advantages of docker?

• Docker is used to deploy the microservices.
• Docker are light weight and takes less time to run the application as compared to the virtual machines
• Dockers uses the underlying linux kernel which makes light weight
• Docker solves the problem of dependency hell .
• Multiple instances of the same application can be run in the same machine at the same time

4. Top 10 commands

• docker images : List the available images in the machine
• docker ps : List of running docker containers
• docker ps -a : List the running and the stopped containers
• docker rm <container-name/id> : Removes the container
• docker rmi <image-name/id> : Removes the image
• docker stop <container-name/id> : Stops the running container
• docker run -p 8082:8080 –name <container-name> <image-name> : Creates a docker container with given name and maps the host port to the container port
• docker start <container-name> : To start the docker container
• docker pull <repo-name/image-name> : To pull the image from the repo
• docker push <image-name> : To push the image into the repo

Devops is a set of practices, tools and cultural philosophy that combines the development teams and operational teams.

10 advantages of devops

1. Fast delivery
2. Defects correction
3. Team collaboration
4. Continuous delivery
5. Reducing the risk of change
6. Quality of the product
7. Continuous improvement
8. Minimal cost production
9. Improve the software performance
10. Reliability

Top 10 tools used in devops

1. Jenkins
2. Docker
3. Kubernetes
4. Maven
5. Git
6. Puppet
7. Chef
8. Ansible
9. Nagios
10. Saltstack

How to implement devops ?

We can use Jenkins to implement CI/CD of the devops. Whenever developers build the application and make changes it will be automatically tested with testcase and upon successful testing it will be deployed to production server . We can integrate many plugins with jenkins such as gerrit and git . Applications can be deployed into containers and these containers can be managed by Kubernetes .