Improvement Cycles and AI
Don MacVittie makes one early prediction for 2024: AI will be the next big DevOps tool to break bottlenecks.
5 Reasons DevOps Teams Need Code Mapping
Just like a physical map gives you a bird’s eye view of a geographical area, code mapping gives you a high-level view of your code.
Survey Sees Spike in Untested Code Leading to a DevOps Crisis
A Sauce Labs survey found many developers admitted they pushed code into a production environment without testing.
Generative AI: The 90% Rule
Don MacVittie explains his vision of generative AI – the 90% rule – and how it will help developers.
Despite Concerns, AI Increasingly Used to Build Software
A GitLab survey found AI is increasingly used to build software despite concerns about introducing it into the SDLC.
Grafana Labs Delivers Open Source Code Profiling Tool
Grafana Labs’ Pyroscope 1.0 is an open source tool that collects data about an application’s code to aid debugging, troubleshooting and optimization efforts.
Google Adds App Modernization Tools to Generative AI Platform
Google this week added automated refactoring capabilities to the generative artificial intelligence (AI) tools it makes available to write code on Google Cloud.
Loosely Couple Your Schema and Keep Data Separate
In software development, one of the primary goals is to write clean, maintainable and extensible code. To achieve this, developers often strive to design systems that are loosely coupled and separate concerns into smaller, more manageable components. Loose coupling refers to the practice of designing components that are not tightly dependent on one another, allowing […]
New Relic Adds Module to Surface Code Metrics
New Relic today added a free CodeStream module to its observability platform to give developers access to metrics and telemetry data that will enable them to write higher-quality code faster. Peter Pezaris, group vice president and general manager of strategy and experience for New Relic, said this capability is part of an effort to shift […]
AWS Previews Amazon CodeCatalyst to Automatically Create Dev Environments
Amazon Web Services (AWS) this week launched a preview release of the Amazon CodeCatalyst framework that leverages blueprints to automatically provision and configure developer environments in its cloud. Announced at the AWS re:Invent 2022 conference, Amazon CodeCatalyst takes advantage of a Project Blueprints tool to launch a source code repository and a project management tracker […]
Bringing Development Environments Into the Modern Age
It’s time to rethink how we deliver distributed access to software development environments. We know how to write code. And there are plenty of well-established tools, techniques and processes for doing so. We know what kind of code to write: Functional, scalable and efficient code that’s inherently secure and that we can readily modify whenever and however […]
GitHub Updates CLI to Make Creating Extensions Easier
GitHub this week made available an update to its command-line interface (CLI) that enables DevOps teams to add extensions to workflows. Billy Griffin, director of engineering for GitHub, said the company’s initial focus was providing DevOps teams with a set of workflows that could be invoked easily via a CLI. Now GitHub is encouraging developers […]
Python Remains Popular in Programming Language Study
A ranking by analyst firm RedMonk reflects on Python’s continued popularity as a leading enterprise programming language for a number of reasons. According to a recent study by RedMonk, JavaScript also remains widely popular as the web development programming language of choice for a significant number organizations. In many ways, Python’s strong showing in the […]
Up Your DevOps Game: It’s Time for NoOps
NoOps is here and it’s more than just a buzzword or an ideal. The next generation of platform-as-a-service (PaaS) platforms are evolving to minimize the developers’ operational burden and reduce dependency on DevOps for deployment. Dev teams that don’t want to deal with operations or don’t have in-house operations resources should consider deploying applications on […]
Two-Part Training Required for Developers to Slay the Security Beast
Developers’ defensive qualities are only as good as the training they receive The playing field between the heroes and villains in cybersecurity is notoriously unfair. Sensitive data is the new gold, and attackers adapt quickly to circumvent defenses, exploiting security bugs large and small for potential paydirt. The volume of code being produced is too […]
6 Advantages of Microservices
Microservices have recently gained in popularity, but you may be unsure whether this architecture is right for your environment. What’s great is microservices are not necessarily a new beast, as the concepts behind them have been a solid part of software development for decades. Topics such as modular programming, separation of concerns and service-oriented architecture […]
GitLab Survey Surfaces Major DevSecOps Challenges Ahead
A report based on a survey of 4,071 software professionals published this week by GitLab, a provider of a continuous integration and continuous deployment (CI/CD) platform, found that while appreciation of the potential value of DevSecOps best practices is high, the ability to implement those practices is uneven at best. According to the survey, half […]
DevOps Chat: Repos and Nexus Firewall Access, with Sonatype
There are really only two repositories of any scale for software components today: the Nexus repo managed by Sonatype and the Artifactory artifact repo managed by JFrog. Up until now they were separate and apart, and working with one was independent of another. In a big move toward keeping DevOps open and secure, the Sonatype […]
DevSecOps: Old Security Bugs Still Performing New Tricks
New Security Flaws Creep into Reliable Old Systems In cybersecurity, we are often like hunters. Our eyes are firmly glued to the horizon, scanning for the next breakout vulnerability (along with the right designing tools, techniques and tactics to stop it). However, this forward-looking focus can have the surprising effect of dampening our overall security […]
Security and Speed: Why DevOps and Security Need to Play Nicely
It isn’t news that DevOps and IT security teams often struggle to align their departments and maintain a coherent balance between keeping a business secure and developing new applications to maintain customer interest. While security processes are a necessity, they can be deemed by DevOps teams to be manual and cumbersome, blocking the agility that […]
Are Developers Your First Line of Security Risk or Defense?
Every organization on the planet, whether public or commercial, is facing an ongoing challenge: to exist in an increasingly digital space. Past products must transform to meet the digital expectations of their customers, and new products must be built with “digital-first” frameworks in mind. After all, if they fail to meet these expectations, there’s almost […]
WhiteHat Security Looks to AI to Advance DevSecOps
WhiteHat Security is now embedding artificial intelligence (AI) into the application security review services it provides, as part of an effort to advance adoption of DevSecOps processes. Joseph Feiman, chief strategy officer for WhiteHat Security, said the biggest resistance factor to DevSecOps has been the amount of time it takes to test applications for vulnerabilities. […]