Why You Should Embrace Incidents and Ditch MTTR
The cliché is that everyone in IT hates incidents, and the natural reaction when assembling incident response metrics is to look for numbers that you can lower over time. Fewer incidents and shorter incident response times must be better, we think. You might already be familiar with the common metrics associated with these goals, including […]
Engineering Applications for DevOps (Part 6)
This blog series explains how to engineer applications for DevOps. Topics covered in this blog series include: • Factors used to decide whether an application is a good candidate for DevOps. • Practices to engineer designs for DevOps. • DevOps applied to enterprise apps and software services. • DevOps applied to COTS systems. • DevOps […]
Engineering Applications for DevOps (Part 5)
This blog series explains how to engineer applications for DevOps. Topics covered in this blog series: • Factors to decide whether an application is a good candidate for DevOps. • Practices to engineer designs for DevOps. • DevOps applied to enterprise apps and software services. • DevOps applied to COTS systems. • DevOps applied to […]
Engineering Applications for DevOps (Part 4)
This blog series explains how to engineer applications for DevOps. Topics covered in this blog series: • Factors to decide whether an application is a good candidate for DevOps. • Practices to engineer designs for DevOps. • DevOps applied to enterprise apps and software services. • DevOps applied to COTS systems. • DevOps applied to […]
Rocky Linux Emerges as a CentOS Replacement
Rocky Linux was created to offer the community an alternative following Red Hat’s recent decision to shift its focus away from CentOS—the open source version of Red Hat Enterprise Linux (RHEL). However, the Linux distro’s popularly can also be attributed to how its creator sought to offer a superior alternative based on lessons learned during CentOS’ […]
Engineering Applications for DevOps (Part 3)
This blog series explains how to engineer applications for DevOps. Topics covered in this blog series: • Factors used to decide whether an application is a good candidate for DevOps. • Practices to engineer designs for DevOps. • DevOps applied to enterprise apps and software services. • DevOps applied to COTS systems. • DevOps applied […]
Aqua Security Acquires tfsec to Advance DevSecOps
Aqua Security today announced it has acquired tfsec, an open source project that provides a static analysis scanner for infrastructure-as-code (IaC) that is designed to be integrated within a DevOps workflow. Amer Jerbi, Aqua Security CTO, said tfsec extends the security platform the company already provides in a way that advances adoption of DevSecOps best […]
Engineering Applications for DevOps (Part 1)
This blog series explains how to engineer applications for DevOps. Topics covered in this blog series: • Factors to consider when deciding whether an application is a good candidate for DevOps. • Best practices for engineering designs for DevOps • DevOps applied to enterprise apps and software services • DevOps applied to COTS systems. • […]
Shhhh! It’s a Secret
In one of our regular back-and-forth breaks, Lori and I were talking shop a week or two ago, and she shared an excellent report by GitGuardian with me. Frankly, none of the information in the report was a huge surprise for me–Git is filled with information that companies probably don’t want out there, but that […]
7 (More) Security Considerations for CI/CD
CI/CD orchestration has become increasingly popular in DevOps practices. It facilitates faster deployment of software and product delivery. Through the use of automation when building, testing and deploying applications, CI/CD bridges the gap between development, operation activities and teams. However, there are many security considerations to keep in mind with frequent deployment. From quality automation […]
A New DevOps Database Platform is Needed
The diverse number of database platforms, deployment environments and data variants needed to support the plethora of applications and services required for rapid DevOps continuous delivery lead times, coupled with the challenges of integrating database changes for application pipelines, is a growing challenge for many organizations as they strive to accelerate their DevOps transformations. When […]
Copado Acquires Qentinel to Gain AI Testing Tools
Copado has acquired Qentinel as part of an effort to incorporate AI-infused application testing within a DevOps platform and build applications using low-code tools across multiple software-as-a-service (SaaS) platforms. The Copado continuous integration/continuous delivery (CI/CD) platform was originally created to accelerate the development of low-code applications on top of the Salesforce platform. Now, however, Copado […]
BMC Extends DevOps Reach from the Mainframe
BMC today announced it has extended its DevOps platform for mainframe environments to provide integrations with GitHub Actions, a framework for managing workflows, and HCL Launch, a continuous delivery platform from HCL Software. BMC gained the DevOps platform with the acquisition of Compuware in June 2020. John McKenny, senior vice president and general manager for […]
8 Security Considerations for CI/CD
In the software development enterprise, CI/CD refers to the combined practices of continuous integration and either continuous delivery or continuous deployment. CI/CD enables organizations to bridge the gap between development, operation activities and teams by the use of automation when building, testing and deploying applications. How do you maintain quality and security with frequent deployments? […]
Big Gains Are Made In The ‘Last Mile’ of DevOps
A new study by mabl found a correlation between complete, fully automated test coverage and a significant increase in customer happiness and DevOps maturity. In contrast, those with moderate DevOps maturity and nearly automated testing coverage tend to experience a sharp decline in end-user satisfaction. Mabl recently released its 2021 State of Testing in DevOps […]
Survey Finds Biggest DevOps Obstacles are Organizational
A survey of 600 IT professionals published this week by mabl, a provider of a test automation platform, finds the biggest barriers to adopting DevOps practices are more closely related to organizational issues rather than any technology. The survey identified non-technological issues as the main inhibitor to DevOps by a wide margin (82%). Only 11% […]
The State of Continuous Delivery in 2021
One of the hallmarks of DevOps is to improve the delivery of software. Therefore, mature DevOps systems employ continuous delivery (CD), the process of releasing bite-sized software changes on a regular basis. Amid high demand for digital innovation, streamlining this release pipeline is becoming more and more crucial for enabling overall software fluidity. So, what […]
Continuous Testing Practices Gap Assessment
Continuous testing is an essential part of DevOps. To get the maximum value from continuous testing, it is important to use recommended best practices, inclusive of people, processes and technologies. A gap assessment is a great way to efficiently evaluate an organization’s practices for DevOps and determine a strategy for improvement. Gap analysis provides valuable […]
Applitools Extends Visual AI Testing to Native Mobile Apps
At its online Future of Testing: Mobile event, Applitools today previewed the ability to apply visual artificial intelligence (AI) to applications that run natively on a mobile computing platform. Accessed via a cloud service that is currently available for free on a limited basis, the Ultrafast Test Cloud for Native Mobile offering will extend the […]
Fugue Aims to Simplify Securing Infrastructure-as-Code
Fugue today unveiled a 1.0 release for Regula, an open source policy engine for infrastructure-as-code (IaC) security that comes with prebuilt libraries for implementing hundreds of policies that validate configurations on Amazon Web Services (AWS), Microsoft Azure and Google Cloud services. Regula is based on the Open Policy Agent (OPA) software being advanced under the […]
JFrog Acquires Vdoo to Advance DevSecOps
JFrog today announced it has agreed to acquire Vdoo for $300 million in cash to gain a set of analytics tools that discover vulnerabilities in application binaries. Vdoo’s scanning tools, infused with machine learning algorithms, will be fully integrated with the JFrog Xray vulnerability detection tools along with the rest of the JFrog continuous integration/continuous […]
Continuous Testing Practices – Part 3
In my prior blog, Continuous Testing – The Quest for Quality at Speed, I described five tenets and some of the practices for continuous testing to help with understanding what continuous testing is. In my consulting work, I find it necessary to use 15 categories of practices to assess an organizations’ continuous testing capabilities. Given […]
CircleCI CEO Sees Growing Need for Developer Experience Engineers
There is no shortage of titles to go with all the tasks that make up a DevOps workflow, but given the critical role developers now play within any organization, it might be time for organizations to start creating a developer experience engineer (DXE) function within DevOps teams that is specifically tasked with increasing developer productivity. […]