OpenSSF Makes Free Security Training Available
The Open Source Security Foundation (OpenSSF), an arm of the Linux Foundation, is providing free security training for developers building and employing open source software starting later this week as part of an overall effort to advance best DevSecOps practices. Linux Foundation CTO Chris Aniszczyk said the Secure Software Development Fundamentals professional certificate program along […]
Azul Adds OpenJDK Migration Services
Azul today announced today it will provide migration services for IT organizations looking to transition from the proprietary Oracle Java Standard Edition (SE) developer platform to the Zulu edition of an open source OpenJDK equivalent. OpenJDK is based on the HotpSpot edition of the Java virtual machine, the Java Class Library and the Java compiler. […]
OpenTelemetry and the Future of Monitoring Instrumentation
OpenTelemetry is an open source project to provide a de facto standard trace API and a metric and log agent to end vendor lock-in It’s no surprise that understanding the internal health of applications and systems is a high priority for developers and SREs. It’s a well-understood problem with dozens of vendors focused on helping […]
Open Source License Compliance Tips for DevOps Pipelines
Open source components are used in most modern organizations, either included directly into software as code or as tools integrated into workflows. In DevOps environments, often a combination of the two occurs. These components can help speed development processes, provide functionality that isn’t otherwise available and decrease operating costs of teams. To successfully implement open […]
Sonatype Advances Open Source Code Quality, Security
Sonatype today launched an Advanced Development Pack service that surfaces dependencies between open source components in a way that makes it easier for developers to know which ones to employ to build the most secure application possible and what components offer the simplest upgrade path. Company CTO Brian Fox said the Advanced Development Pack service […]
SOFIHUB Relies on DevOps to Support Independent Seniors
How DevOps is helping one company ensure an active older population can remain independent SOFIHUB home is designed to support older people who wish to live as independently as possible. However, its sensor-based system needed an upgrade to improve the user experience. The SOFIHUB technology connects wirelessly to sensors placed around the home and learns […]
Catchpoint Acquires Webpagetest.org Service
Catchpoint this week announced it has acquired Webpagetest.org as part of an effort to expand use of the open source web performance testing service. Led by Patrick Meenan, the Webpagetest service is already relied on by more than 1 million users per month to instantly run tests of websites and applications from various locations, which […]
Harmonizing Real-Time on Edge Platforms
Edge computing platforms sit at the boundary between the real-time world and the digital enterprise. Uninterrupted, uncorrupted data from the edge is a must if analytics in the cloud drive reliable business decisions. What’s the best approach: using Linux, an RTOS (real-time operating system), a hypervisor or something else for edge platforms? Let’s talk about […]
Z is for Zowe – the Open Path to Mainframe DevOps
The energy and excitement in the IBM Z mainframe community during the two years since the announcement of Zowe have not been seen in a generation. By enabling mainframers to work like technologists who work on the cloud, mobile and distributed platforms, Zowe unlocks the power of DevOps for mainframers, ensuring the vitality of the […]
Gitpod Open Sources Automated Local Development Environment
Gitpod announced today it is making available an instance of its Gitpod integrated development environment (IDE) available under an open source license. Company CEO Sven Efftinge said DevOps teams will now have the option of deploying Gitpod themselves as an alternative to the existing cloud service provided by the company. Designed to be used in […]
Why We Need a Software Bill of Materials Industry Standard
The SBOM concept is part of is an industry-led, multi-stakeholder process to improve software component transparency Have you ever gotten a recall notice for the vehicle you drive? Perhaps your car or truck was part of the big recall on airbags a few years ago. It’s standard procedure for auto manufacturers to notify owners of […]
Spotify Adds Custom Deployment Templates to Service Catalog Project
Spotify has entered the next phase of the open source Backstage catalog project by adding support for templates through which the process of deploying software components now can be automated. Backstage was developed by Spotify to create an open source catalog through which DevOps teams could build portals through which developer tools are centrally managed. […]
CNCF Provides Jaeger Distributed Tracing Update
The Cloud Native Computing Foundation (CNCF) has made available a report detailing the progress being made around the open source Jaeger distributed tracing software. Among other things, the report notes there are now more than 300 organizations contributing to the project. Jaeger is designed to provide a framework for monitoring microservices-based applications in a way […]
CDF Officially Graduates Jenkins CI/CD Platform
The Continuous Delivery Foundation (CDF) announced today that the open source Jenkins continuous integration/continuous delivery (CI/CD) has officially graduated. Jenkins was donated last year to the CDF, an arm of The Linux Foundation, along with Jenkins X, a CI/CD platform for Kubernetes; Spinnaker, a CD platform; and Tekton, a framework for building pipelines that will […]
Cassandra Update Boosts Recovery Speeds
Apache Cassandra is a row-oriented NoSQL database created by developers working at Facebook. With elasticity as one of its key features, open source contributors have added new streaming capabilities to Cassandra 4.0 for its beta launch. These improvements have been shown to enable the database to stream data between nodes at speeds up to five […]
Okta Offers PASETO as Alternative to JSON Tokens
Okta today launched an open source library for using Platform-Agnostic Security Tokens (PASETO) as an alternative to JSON Web Tokens (JWT) to authenticate end users. Randall Degges, head of evangelism for Okta, said PASETO is quickly emerging as an easier, more secure implementation of the JWT specification. PASETO is a draft specification created by Scott […]
Snyk Tool Prioritizes Open Source Vulnerabilities
Snyk today announced it has enhanced the ability of its namesake vulnerability scanning tool by adding the ability to identify which open source vulnerabilities should be fixed first using a scoring tool that leverages data science and machine learning algorithms to analyze code. In addition, DevOps teams can now take advantage of automated pull requests […]
Google Exposes Old Wounds in Open Source Community
Things boiled over a bit last week with the announcement that Google launched the Open Usage Commons (OUC) consortium (see Mike Vizard’s article here). The announcement and subsequent angst it has caused has upset what had been a pretty stable environment that helped open source software become the dominant force in development and IT. While […]
How to Source Vulnerability Data for True DevSecOps
Open source comes with code vulnerabilities that must be considered in the DevOps process The war between open source and “only proprietary code” is long over. Open source won the day by convincing the opposition of the benefits of joining the open source community. “Vulnerabilities in the Core,” a report published by the Linux Foundation […]
DevOps Deeper Dive: Google Roils Open Source Community
Google this week agitated the bulk of the open source community by launching the Open Usage Commons consortium to protect the trademarks of open source projects, starting with the Istio, Angular and Gerrit projects it launched. Launched in collaboration with SADA Systems and some independent contributors, the stated goal of the Open Usage Commons is […]
CNCF Looks to Increase Open Source Sandbox Projects
The Cloud Native Computing Foundation (CNCF) today announced it has simplified the process it employs to enable open source software to become a sandbox project managed under its auspices. Priyanka Sharma, general manager for the CNCF, said the organization is looking to increase the number of open source projects that make up the cloud-native ecosystem. […]
5 Areas to Consider When Building an Open Source Stack
Open source software has gone mainstream, propelled by the increasing maturity of many communities and tools working together with organizations seeking ways to deploy software faster and cheaper. According to Gartner Research, over 95% of them are deploying open source software, and while it brings many benefits, it also introduces a whole new set of […]
Open Mainframe Project Pushes Zowe Platform Into LTS
The Open Mainframe Project (OMP) announced this week that a long-term support (LTS) edition of Zowe, the open source integration platform for mainframes running z/OS, is now generally available. Announced at the virtual Open Source Summit, this edition of the framework for integrating administration, management and development tools based on web technologies will not be […]