Securing the CI/CD pipelines with DevSecOps

Source:-https://www.devopsonline.co.uk Continuous Integration and Continuous Delivery (CI/CD) can bring a seamless integration from end-to-end for the software development and deployment process. By doing this, CI/CD allows developers to dedicate more of their time developing code to improve software features instead of worrying about the deployment. Yet, they are still faced with many security challenges. CI/CD might speed up the process but not the security. With DevSecOps – Development, Security, and Operations -, however, there is a possibility to accelerate the

Read more

Securing the CI/CD pipelines with DevSecOps

Source:-https://www.devopsonline.co.uk Continuous Integration and Continuous Delivery (CI/CD) can bring a seamless integration from end-to-end for the software development and deployment process. By doing this, CI/CD allows developers to dedicate more of their time developing code to improve software features instead of worrying about the deployment. Yet, they are still faced with many security challenges. CI/CD might speed up the process but not the security. With DevSecOps – Development, Security, and Operations -, however, there is a possibility to accelerate the

Read more

Publishing to Azure Container Registry using Azure Pipelines

Source: chrissainty.com Containerising Blazor Applications With Docker (Part 3) Part 1 – Containerising a Blazor Server AppPart 2 – Containerising a Blazor WebAssembly AppPart 3 – Publishing to Azure Container Registry using Azure Pipelines (this post) In part 1 and part 2 we looked at how to containerise Blazor applications with Docker. We can now run Blazor Server and Blazor WebAssembly apps in containers locally – which is great! But how do we go about automating the building of Docker images as part of a CI pipeline? And where

Read more

Azure DevOps team sends help for PRs, pipelines and processes

Source: devclass.com The final version of Azure DevOps Server (ADS) 2019 Update 1 is now generally available, adding a basic process, analytics improvements and better GitHub integration to the product formerly known as Team Foundation Server. Basic process is meant as a simple approach to complement the previously available Agile, Scrum and CMMI options for new projects. It offers teams the work items Issues (to keep track of features, bugs, and user stories), Epics (for grouping Issues) and Task for

Read more

Azure opens up DevOps Pipelines to Auditing

Source:- devclass.com Microsoft has given curious managers greater insight into who is doing what in their Pipelines, with a public preview of Auditing for Azure DevOps. According to a blog post by Azure DevOps senior engineer, Octavio Licea Leon, “When an auditable event occurs, a log entry is recorded. These events may occur in any portion of Azure DevOps.” He listed Git repo creations, permission changes, resource deletions and accessing the auditing feature as typical auditable events. This means you – or

Read more

Continuous integration and delivery with Jenkins Pipelines & Blue Ocean

Source – moori.n At Moor Interactive we continuously improve our development and deployment workflows in order to provide a very reliable process for getting our code to production as fast as possible. Over the decade we have intensively worked with Jenkins as our CI/CD platform. Travis CI and Drone are also platforms we used a lot in the years as we used to store everything in Git (the thing we missed about Jenkins and it’s job configurations). Last week we took

Read more