Qualys brings web application security to DevOps

Source – helpnetsecurity.com Qualys announced new functionality in its web application security offerings that helps teams automate and operationalize global DevSecOps throughout the Software Development Lifecycle (SDLC), drastically reducing the cost of remediating application security flaws prior to production. Qualys Web Application Scanning (WAS) 6.0 now supports Swagger version 2.0, a new native plugin for Jenkins for automated vulnerability scanning of web applications, and the new Qualys Browser Recorder. New functionality Qualys WAS 6.0 and new capabilities include: Scanning of Swagger-based

Read more

The integration of DevOps and security

Source – jaxenter.com The cloud delivers to enterprises operational and management advantages by being agile, user friendly, and optimized to scale. It also enables IT teams to apply continuous integration/continuous deployment (CI/CD) methods to deliver applications and functionality more rapidly. By using the development and delivery methodology known as DevOps, the entire organization can be more responsive to customer and market needs and deliver innovation continuously. Speed is the essence of DevOps; the idea is to iterate, iterate, iterate, and get

Read more

GitLab collaborates with Google Cloud on app deployment

Source – sdtimes.com GitLab announced a new collaboration with Google Cloud to offer native integration into Google Kubernetes Engine (GKE). This new integration aligns with GitLab’s vision of Auto DevOps. Auto DevOps is GitLab’s way of automating DevOps and delivering ideas to production faster. It consists of a collection of build, test and deployment features. The new integration aims to simplify the complexity of setting up and deploying to a Kubernetes cluster. It will also automatically configure CI/CD pipelines to build,

Read more

Secdevops or devsecops or devops next-generation (NG) – What is your take on devops?

Source – csoonline.com I recently had the opportunity to attend and present at the Advanced Technology Academic Research Center (ATARC) Devops Summit last month. There was, as expected given the topic, a huge turn-out of US federal, commercial and public-sector participants looking to learn, connect and share lessons from adopting and implementing devops in their organizations. A key moment at the summit conference was an informal survey of over 200 participants by Tom Suder, the President of ATARC. Tom pulsed the

Read more

GitLab 10.6: CI/CD for GitHub, increased Kubernetes support

Source – jaxenter.com DevOps without CI/CD is like trying to build a house out of popsicle sticks. Sure, it can be done, but oh man, are you making your life harder than it needs to be. So, the fact that GitLab, one of the most popular Git-repositories on the internet, still didn’t support CI/CD with GitHub has been something of a thing. Now, that problem is gone forever with GitLab 10.6. GitLab’s popular built-in continuous integration, continuous delivery, and continuous deployment

Read more

Developer Report Compares Agile vs. DevOps

Source – techtarget.com One interesting aspect of the new developer report from GitLab Inc. — a company based on the open source GitLab project — is a comparison of two popular development approaches Agile and DevOps. The GitLab project’s Community Edition provides a complete open source software development platform featuring built-in version control, issue tracking, code review and Continuous Integration/Continuation Delivery (CI/CD). In its new “2018 Global Developer Report” based on a survey, GitLab Inc. covered a wide range of

Read more

Jenkins basics: The DevOps and build platform for dev teams

Source – techtarget.com Jenkins is a tool that manages how a team compiles software code and pushes it out to users. Here are the introductory steps to Jenkins basics and how to install it. Jenkins gathers code from developers on a team, runs unit and functional tests, and pushes the tested code and configurations out to target systems. Jenkins has been given the label DevOps, and its focus is not just infrastructure. When you install Jenkins, its role in the DevOps

Read more

Integrate DevOps and containers with simple tool adjustments

Source – techtarget.com Organizations adopt DevOps methodologies to reduce application development time and improve code quality, consistency and security. They adopt containers for many of the same reasons. A typical implementation pulls together multiple tools for development and deployment tasks in a chain. It must be flexible enough to accommodate: different programming languages, such as C, Python and Go; application targets, both mobile and web; and diverse deployment platforms, including virtual servers, cloud services and containers. Given the ever-increasing popularity of

Read more

Database automation drives DevOps into the persistence layer

Source – theserverside.com The adoption of highly scriptable cloud-based technologies, along with the emergence of continuous integration (CI) and continuous deployment (CD) tools, has created an environment in which every operations process should be scriptable and all manual processes targeted for automation. Organizations with a DevOps approach to application lifecycle management should automate every process imaginable, but they often hit a wall when they reach the persistence layer. Emerging technologies have the potential to make that limitation disappear. Apply DevOps lessons

Read more

Three Keys to Aligning Digital and DevOps

Source – news.sys-con.com On first glance, Digital Transformation and DevOps seem to be separate, disconnected endeavors – especially once you realize that Digital Transformation is more about aligning the organization with changing customer needs and desires, rather than software. DevOps, in contrast, appears to be all about the code – how to build, maintain, and update it more quickly. Yet this view of DevOps also misses the bigger picture, as the movement is more of a cultural and organizational change that

Read more

How DevOps Principles Are Being Applied to Networking

Source – infoq.com Practices from the DevOps world are being adopted into managing networking services. Vendor hardware, configuration tools and deployment modes have eased programmable configuration and automation of network devices and functions. Some recommendations on how to adopt network automation practices include looking at networks-as-code (along the lines of infrastructure-as-code), orchestration as part of CI/CD pipelines, using network functions that can be deployed in smaller units like containers, applying chaos engineering principles to network services delivery, and measuring and predicting

Read more

DevOps for networking: What the future looks like

Source – jaxenter.com Can incorporating networking in the DevOps culture boost your organization’s growth? DevOps solution architect and Packt author, Steven Armstrong, certainly believes so. In his book, ‘DevOps for Networking’, Armstrong explores the fundamentals of DevOps in networking and how to improve DevOps processes and workflows by providing automation in your organization’s network. We asked him a few questions about the future of DevOps in networking and what DevOps engineers need to be learning to get ahead. What does the

Read more

What is DevSecOps? Developing more secure applications

Source – itworld.com The simple premise of DevSecOps is that everyone in the software development life cycle is responsible for security, in essence bringing operations and development together with security functions. DevSecOps aims to embed security in every part of the development process. It is about trying to automate core security tasks by embedding security controls and processes early in the DevOps workflow (rather than being bolted on at the end). For example, this could be the case when migrating to

Read more

4 trends to watch as IT automation expands

Source – enterprisersproject.com We recently examined some of the fundamental factors that have fueled IT automation to this point. “To this point” is the operative phrase – there’s not necessarily a finish line for automation, and even as it matures, automation is going to continue evolving from a technical, business, and people standpoint. With that in mind, we asked a variety of experts for their insights on the current trends to watch as automation grows inside of IT shops going forward,

Read more

Weave Cloud for GKE aims to simplify DevOps pipeline

Source – rcrwireless.com Weaveworks announced free tier of Weave Cloud for Google Cloud Platform users. The platform is intended to make it easier to develop, deploy and oversee container-based applications. Weave Cloud is a software-as-a-service leveraged by app developers. It is made to alleviate challenges within the container-production pipeline. The platform can be integrated with CNCF Kubernetes, Docker Swarm/UCP, AWS ECS, Apache Mesos and Mesosphere DC/OS. To reap the benefits of the container-managed platform Kubernetes, DevOps teams have to combine various

Read more

5 programming languages you need to know for DevOps

Source – jaxenter.com How can we make sure our DevOps adoption is a success? Are there certain languages that fit DevOps better than others? Today, we take a look at different programming languages to see which is the best approach for DevOps. Quick caveat: if your favorite programming language isn’t on this list, that doesn’t mean it isn’t the bee’s knees. DevOps is a state of mind and a methodological process for technology, not an ironclad one-size-fits-all tech approach. If you’re

Read more

Common sense DevSecOps tips for developers

Source – jaxenter.com DevSecOps might be the latest in a long line of tech buzzwords, but it’s actually a fairly practical way at promoting secure tech practices while uniting different spheres of production and operations. But getting into a DevSecOps mindset requires serious collaboration to change processes and tech for the better. As DevSecOps is rapidly becoming the preferred approach for organizations, it becomes even more important to take a moment and make sure everything is heading in the right directions.

Read more

With continuous security, SecDevOps deconstructs CI/CD

Source – techtarget.com DevOps has taken the IT world by storm over the last several years. It’s often credited as a way to reduce costs, speed deployments and improve corporate agility. Yet the application lifecycle management process is taking at least some of the blame in the fallout from recent high-profile security breaches. In principle, at least, “DevOps teams that deploy software are responsible for maintaining security by design,” said Craig Lurey, CTO and co-founder of Keeper Security, a Chicago-based security

Read more

DevOps: Google ignores country domain and delivers search results on detected location

Source – zdnet.com Google is doing away with using the country code element of its domain name to decide which version of its search results to serve users, and will instead serve the user results based on detected location. This means that regardless of whether a user searches from google.com, google.co.uk, or google.com.au, for instance, the search giant will only return one set of results based on where the search engine believes the user is located. The option to change the

Read more

DevOps pros and open source: Culturally connected

Source – devopsagenda.techtarget.com DevOps pros love open source software partly for technical reasons. They also love open source because open source software overlaps culturally with DevOps. Understanding where open source and DevOps intersect leads to a better understanding of DevOps itself. If you look around the DevOps world, open source software is everywhere. Platforms like Jenkins, Ansible, Docker and Nagios — to name just a handful of examples — form part of the toolchain of DevOps organizations far and wide. That does

Read more
1 2 3 4 5