What Is DISA STIG?
You need to ensure that your software is secure and safeguarded from security vulnerabilities. DISA STIGs help you ensure the security of your software. Read on to learn how. What You Need to Know About DISA STIG Defense Information Systems Agency (DISA) provides technical guides referred to as Security Technical Implementation Guides (STIGs). DISA is […]
Software Safety vs. Security: What’s the Difference?
When developing software, you must ensure that that it is both safe and secure. But what is the difference between your code being safe, and your code being secure? Here, we discuss the differences between the two, and explain why you need to ensure that your software is both safe and secure. The Difference Between […]
DevSecOps for Security and Safety-Critical Software Development
One of the most effective software development practices for safety-critical software is DevSecOps. Put simply, DevSecOps automates development and security processes to ensure the security and reliability of software. Here, we explain what you need to know about DevSecOps. What You Need to Know About DevSecOps Automation DevSecOps is a software development practice that automates […]
What is Differential Analysis?
Differential analysis is an emerging solution for static analysis tools. It is a relatively recent solution, but it’s important to understand what it is, how it works and why you should care. What’s Differential Analysis? Put simply, differential analysis is a form of “fast feedback” static code analysis. By using system context data from previous […]
How to Prevent Cybersecurity Threats With Secure Code
Unfortunately, cybersecurity attacks are an ever-present threat for organizations of all sizes and industries. In fact, a cybersecurity threat is estimated to occur every 39 seconds. For that reason, it is important to understand the how, what and why of cybersecurity threats. The How, What and Why of Cybersecurity Threats Any malicious attack that threatens […]
Guide for Software Development & Software Security
In order to ensure an efficient, secure and successful software development project, there are many factors that you and your team must consider when starting a new project. The most common and pertinent considerations for many include defining the requirements of the project, selecting the correct processes for each stage of the software development project, […]
What is CERT? Overview of CERT Secure Coding
As you write code, you must ensure it is secure and safeguarded from potential security threats. That’s why CERT is essential. Read on to learn more about CERT. What You Need to Know About CERT Secure Coding CERT is a secure coding standard that supports commonly used programming languages, like C, C++ and Java. The […]
CI/CD Best Practices for Software Development
Continuous integration (CI) and continuous delivery (CD) are popular software development practices for automation and shortening feedback times. However, set up improperly, your CI/CD pipelines could instead cause delays in development. For that reason, review CI/CD best practices to ensure that your pipelines are effective and efficient. What You Need to Know About Continuous Integration […]
Add Static Code Analysis to Your CI/CD Pipelines
An efficient CI/CD pipeline is necessary for accelerating software delivery without sacrificing quality, and a static code analysis tool is an essential part of that pipeline. A static code analysis tool inspects your code as it is being written to identify defects, vulnerabilities and compliance issues — without having to run the program. What’s more, […]
How to Improve Code Quality, Efficiently, with Static Analysis
As hard as they try, no programmer is perfect. Testing and manual code reviews cannot find every problem in their code, so software vulnerabilities and bugs persist. Unfortunately, the amount of software errors will only continue to grow as your systems get larger and more complex. Which begs the question: How can you find all […]
What Are Security Standards? Secure Coding Standards Overview
To read more, please visit: https://www.perforce.com/blog/qac/secure-coding-standards Mitch Ashley
What Is a CI/CD Pipeline? How to Improve CI/CD
The most effective way to ensure that your CI/CD pipeline is efficient is to use the right tool, like a static code analyzer. Here we explain what is a CI/CD pipeline and how a static analysis tool can help. What You Need to Know About CI/CD Pipelines The easiest way to understand a CI/CD pipeline […]
Continuous Integration Overview
To improve the efficiency of your software development workflow, you should use continuous integration. We’ll explain what continuous integration is, why it’s important and how it can help you. Continuous Integration in DevOps Continuous integration is the automation of building and testing code each time a change is made in the codebase, and then committing […]
What Is AppSec? An Overview
An estimated 84% of security incidents happen at the application layer. And, with the number of cybersecurity threats steadily rising year-over-year, application security (AppSec) has become absolutely essential. Application security refers to finding, fixing and preventing cybersecurity vulnerabilities throughout the entire development life cycle. By enforcing application security measures, you are able to ensure that […]
Shifting Left and Static Code Analysis with Perforce
Perforce Product Manager Stuart Foster, and Evangelist Steve Howard, join Mitch Ashley to discuss the importance of creating security software from the beginning of the development process. We discuss shift left, SAST, source code scanning and other pursuits towards this goal. The video is immediately below, followed by the transcript of the conversation. Enjoy! Transcript […]
DevOps Chats: 1-Click Vulnerability Scanning on GCP, With Qualys
Sometimes the best way to accomplish something is to choose a path requiring the least friction, or amount of change. Qualys customers now have that path available to them in bring vulnerability scanning into Google Cloud Platform. Qualys’ recent announcement means a one-click configuration change enables vulnerability scans in GCP with the results appearing in […]
DevOps Chats: Canary Deploys Using Istio, with Autodesk
Spinnaker Summit 2019 Preview: Canary deploys give us a window into how new code deploys perform in production on a limited basis. The technology holds great promise in helping us learn the positive or negative effects of deploys without putting the more extensive set of microservices, application functions and beyond at risk. How do you […]
DevOps Chats: The Future of Farming with Aerobotics
Spinnaker Summit 2019 Preview: Never underestimate an entrepreneur looking to solve a real-world problem. Aerobotics is bringing drones, imagery, mapping, containers, Kubernetes, Spinnaker, data pipeline processing and machine learning to agriculture. Sounds interesting, right? Aerobotics uses aerial drones and sophisticated image processing to help growers manage yield, pest and disease in their farms through artificial […]