Managing dependencies isn’t easy for developers, especially in large projects with dependencies from many different sources. Staying organized when using dependencies is crucial both for productivity and security reasons, but can be a daunting task. Tips for managing dependencies often emphasize two primary messages: Establish Policies and Encourage Automation.
Continue ReadingThe Purpose and Process of Software Due Diligence
Software due diligence is a process completed during a merger or acquisition of a software company that analyzes all aspects of the target company, its operation and its product prior to investment or purchase by another company. It is a key step in building trust between the companies, as it is used to determine how…
Continue ReadingWhat is DevSecOps
As DevOps has become more mainstream and the benefits become well known, practitioners have looked at new ways to apply and extend the concepts to expand the benefits of DevOps philosophy to other areas of the business. One such natural extension is DevSecOps. DevSecOps takes the core tenets of DevOps and expands them to include…
Continue ReadingExploring DevSecOps
Intro to DevSecOps As DevOps has become more mainstream and the benefits become well known. Practitioners have looked at new ways to apply and extend the concepts to expand the benefits of DevOps philosophy to other areas of the business. One such natural extension is DevSecOps. DevSecOps takes the core tenets of DevOps and expands…
Continue ReadingDevOps is Series: Jez Humble
There are many takes on what DevOps is. There are many different angles from many people. In this series, we will explore a few of the different opinions of key companies and influencers on what DevOps is and what it means to key influencers in the space.
Continue ReadingDevOps is: The Agile Admin
The Agile Admin says DevOps is “a new term emerging from the collision of two major related trends. The first was also called “agile infrastructure” or “agile operations”; it sprang from applying Agile and Lean approaches to operations work. The second is a much expanded understanding of the value of collaboration between development and operations…
Continue ReadingDevOps Is: Atlassian
Atlassian says DevOps is “a set of practices that works to automate and integrate the processes between software development and IT teams, so they can build, test, and release software faster and more reliably. The term DevOps was formed by combining the words “development” and “operations” and signifies a cultural shift that bridges the gap…
Continue ReadingDevOps Is: (AWS) Amazon Web Services
AWS says DevOps is “the combination of cultural philosophies, practices, and tools that increases an organization’s ability to deliver applications and services at high velocity: evolving and improving products at a faster pace than organizations using traditional software development and infrastructure management processes. This speed enables organizations to better serve their customers and compete more…
Continue ReadingDevOps Pipeline Security
When developing software, ensuring integrity of the product is a top priority. Manually checking source code for weaknesses is not an option when trying to protect an application, as it is generally financially infeasible for human developers to take the time to comprehensively find flaws. Thankfully, this task can be automated using security scanning tools,…
Continue ReadingManaging OSS for Mergers and Acquisitions
In today’s software industry, mergers and acquisitions are quite common, even considered a frequent occurrence. Some in the industry have even said they’re “the name of the game” in the software industry. While larger companies often acquire smaller ones, it isn’t at all uncommon for the opposite to occur, so no matter how large or…
Continue Reading