DevOps.com

Where the world meets DevOps

Recent Articles

Chef Achieves Multiple Compliance Mandat…

Continuous Compliance and DevSecOps in T…

What It Really Takes to Build Compliant Apps

by 0 Comments

Build Compliant AppsIf you search online for “software compliance,” you’ll be met with a seemingly endless lineup of blog posts, how-tos and explainer articles promising to tell you everything you need to know about writing and deploying software in a compliance-friendly manner. Some of those are good resources, especially the ones that delve into meeting specific compliance […]

CloudBees Further Extends Jenkins CI/CD Reach

by 3 Comments

CloudBees announced it is expanding the scope and reach of its Jenkins open source continuous integration/continuous development (CI/CD) platform into the realms of compliance and serverless computing frameworks. Announced at the DevOps World | Jenkins World conference in Nice, France, a new plugin for Jenkins adds support for the AWS Serverless Application Model (SAM) defined […]

Chef Extends Scope of Compliance Automation

by 2 Comments

Chef has extended the reach of its InSpec compliance automation framework by adding a plug-in architecture that makes it easier for developers to programmatically generate compliance controls that can be applied to automation frameworks. The Terraform configuration management framework developed by HashiCorp is the first framework supported via the plug-in architecture. InSpec previously was integrated […]

Compliance and Audit Readiness: The DevOps Killer?

by 0 Comments

Compliance and audit readiness are more important than ever, as our customers demand more control over their personal data, while sophisticated attackers try to break into our IT systems.  Many standard practices related to regulatory compliance assume a waterfall delivery model and a clear separation between development and operations.  DevOps practices, such as continuous delivery […]

Don’t Forget to Automate Cloud Security

by 2 Comments

Automate Cloud SecurityCloud has been around long enough, and we’ve had enough breaches stemming from unsecured cloud (mostly data objects, but other items, too) that we should know better. I cringe whenever I see a security headline along the lines of “… Unsecured S3 Bucket.” Would you publicly expose a server in your data center and not […]

Has DevOps Caused the Re-emergence of Shadow IT?

by 2 Comments

Re-emergence of Shadow ITShadow IT is back, and this time, it’s in the DevOps toolstack “One of our clients conducted an audit and found more than 10,000 Jenkins instances across their IT landscape!” This remark from a tooling vendor that helps enterprises centralize their continuous integration infrastructure really took me by surprise. For starters, I was impressed how […]

Software Liability Goes Global

by 1 Comments

Software Liability Goes GlobalThis month, France turned up the conversation on software liability for manufacturers who place known defective software components in their products. But, they are not the first. Software Liability in France According to Lukasz Olejnik, lawmakers in France just suggested a desire to “put the security liability in hands of product suppliers. In other words, making […]

Automation Levels the Playing Field for Continuous Compliance

by 0 Comments

Automation Levels Continuous ComplianceAt this point, I doubt there is any company doing business anywhere that doesn’t fall under at least one compliance framework. One universal truth of compliance—in intent, if not in practice—is that it is a process, not an event. Checking boxes and passing an audit is a requirement of most compliance mandates, but the real […]