WhiteSource Acquires Diffend to Secure Open Source Supply Chains
WhiteSource this week announced it has acquired Diffend as part of an expended effort to discover malware that has been deliberately injected into open source software by a contributor acting in bad faith. Company CEO Rami Sass said cybercriminals are increasingly trying to compromise software supply chains that today depend heavily on open source projects. […]
Pulumi Moves to Automate Cloud Infrastructure Provisioning
Pulumi announced today it is expanding the scope of its automation ambitions to make it easier to securely provision cloud infrastructure-as-code. Joe Duffy, Pulumi CEO, said the Cloud Engineering Platform enables DevOps teams to use Pulumi Packages to create reusable components for automating IT infrastructure provisioning in a way that can be embedded within workflows […]
Is Open Source More Secure Than Closed Source?
There’s no getting around the fact that security is one of the most essential factors in day-to-day operations for most software developers. From proprietary code to sensitive customer data and everything in between, there are hundreds – if not thousands – of crisis scenarios that can result from gaps in security. Data security is an […]
RapidAPI Adds Library to Invoke Kafka via API
RapidAPI announced it has added support for the open source Kafka messaging software as another type of application programming interface (API) that DevOps teams can centrally access. An open source library provided by RapidAPI, available in beta, makes it possible to discover Kafka clusters and topics, view schemas and test and consume records from a […]
Gitpod Revamps Dev Automation Tool
Gitpod announced today it refreshed the dashboard for its namesake open source tool for automating the deployment of development environments, in addition to making Microsoft VS Code its default tool for editing code. In addition, Gitpod has included support for sudo privileges and Docker images using an advanced user namespace to map and limit access […]
Apollo GraphQL Makes Federated Server More Accessible
In advance of its online GraphQL Summit this week, Apollo GraphQL announced today it has updated its Apollo Federation offering that enables a GraphQL Server to span multiple platforms, making it more accessible to a wider range of developers using different tools. Apollo Federation is now integrated with both Apollo Studio, a web-based tool for navigating […]
AlmaLinux Foundation Delivers on CentOS Promise
A nonprofit organization launched this week to oversee future development of AlmaLinux, a distribution of Linux based on code originally contributed to the open source CentOS project. At the same time, CloudLinux, which created AlmaLinux in response to a decision by Red Hat to pull financial support for CentOS, announced that a stable version of […]
42Crunch API Security Platform Now Available On-Premises
42Crunch has announced that the scanning tools it provides to enable DevOps teams to secure application programming interfaces (APIs) can now be deployed in on-premises IT deployments. Previously only available as a cloud service, the 42Crunch API Security Platform has also been updated to provide expanded support for the OpenAPI specification for REST interfaces defined […]
Red Hat Survey Reveals More Confidence in Open Source
A recent Red Hat survey revealed how DevOps teams increasingly depend on open source to support their shift to cloud-native environments and digital transformations, and to maintain security in these highly distributed environments. Based on a survey of 1,250 IT professionals, Red Hat maintains that the survey respondents — from organizations that were Red Hat […]
Linux Foundation Takes Control Of AsyncAPI Specification
The Linux Foundation announced today that it now plays host to an AsyncAPI Initiative that has developed a specification and a suite of open source tools for asynchronous application programming interfaces (APIs) and event-driven architectures. Founding sponsors of the AsyncAPI Initiative include Ably Realtime, Apideck, Bump, IQVIA Technologies, Slack, Solace and TIBCO. Most recently, Postman, […]
Python Remains Popular in Programming Language Study
A ranking by analyst firm RedMonk reflects on Python’s continued popularity as a leading enterprise programming language for a number of reasons. According to a recent study by RedMonk, JavaScript also remains widely popular as the web development programming language of choice for a significant number organizations. In many ways, Python’s strong showing in the […]
Progress Unveils First Update to Chef Automation Portfolio
Progress today announced it has enhanced its Chef Enterprise Automation Stack (EAS) and released a new version of Chef Infra Client that promises to make the programming language on which EAS relies more accessible. Sudhir Reddy, vice president of engineering for Progress, said the latest versions of both offerings are the first updates to the […]
Eclipse Foundation Creates Adoptium Working Group for OpenJDK Binaries
The Eclipse Foundation announced today a working group that will establish a governance framework for an Eclipse Adoptium project that enables developers to download compatible runtimes based on OpenJDK source code. Members of the Adoptium working group include Alibaba Cloud, Huawei, IBM, iJUG, Karakun AG, Microsoft, New Relic and Red Hat. OpenJDK is a free […]
Open Source Vs. Proprietary DataOps
Core DataOps concepts are making their way into data engineering teams and, from there, into the broader enterprise. Data engineers are retooling how they create data products, and much of this work revolves around creating data pipelines. DataOps pipelines offer the kind of observability that traditional data integration and ETL processes don’t or can’t. They […]
Harness Revamps User Interface for CI Platform
Harness today announced it has updated the community edition of its continuous integration (CI) platform with, among other updates, a revamped user interface. Formerly known as Drone.io, the latest release also adds pipeline execution visualizations, governance and security controls and live CI pipeline debugging capabilities. Harness last year acquired Drone.io, an open source CI project, […]
Oracle Updates Java Development Platform
Oracle announced today the availability of Java 16, which adds 17 enhancements to a software development kit that is now being updated every six months. Georges Saab, vice president of development for the Java Platform Group at Oracle, said while most Java development teams are still using Java 8 or earlier editions of the platform, […]
Linux Foundation Project Secures Software Supply Chains
The Linux Foundation today embraced a sigstore project founded by Red Hat, Google and Purdue University to make it simpler for developers to employ cryptographic software, enabled by transparency log technologies, to secure software supply chains. Luke Hinds, security engineering lead in the office of the CTO at Red Hat, said he and Dan Lorenc, […]
Kong Integrates Service Mesh with OPA
Kong, Inc. today announced an update to Kong Mesh, built on top of open source Kuma service mesh, that adds support for Open Policy Agent (OPA) software that enables DevOps teams to manage compliance as code. Kuma and OPA are both being developed under the auspices of the Cloud Native Computing Foundation (CNCF). Kuma, unlike […]
How Open Source Software Powers Digital Innovation
Open source has permanently altered how we work and conduct business. Linux, and thousands of other open source projects and open standards, now dominate the software landscape, supporting emerging technologies like artificial intelligence and edge computing. Without open source, the DevOps tooling ecosystem would lack Docker, Kubernetes, service mesh, popular databases, and many CI/CD tools […]
IaC Frameworks: Vendor-Specific or Multi-Cloud?
Over the past few years, I have been watching the shift to infrastructure as code (IaC) frameworks closely. With the shift from monolithic to microservices, and with the shift from mostly virtual machines (VMs) to cloud-native architecture, applications are much more complicated, making it much more important to automate infrastructure to respond with speed. In […]
Scarf Gateway Tracks Open Source Software Usage
Scarf today exited stealth to launch a gateway that makes it simpler for individuals or organizations to track usage of open source software. Avi Press, founder of Scarf, said the Scarf Gateway is an online service through which providers of open source software can redirect downloads from a wide range of repositories and registries. That […]
Survey: The State of Database DevOps
Enterprises are undergoing rapid changes. Throughout the past year, companies have been pressed to learn a diversified set of technologies and methods to remain agile in a changing economy. In this digital-first world, data plays a heightened role; in tandem, so does the delivery of data and the persistence of the database layer itself. Applying […]
Amex, Adobe Join GitHub Intern Program
GitHub revealed today that Adobe and American Express have joined its Summer 2021 Fellowship program, a 12-week, hands-on curriculum where interns work alongside developers to contribute to open source projects hosted on the GitHub repository. Vanessa Gennarelli, senior director of education at GitHub, said the overall goal of the program is increase the pool of […]