Operations | Monitoring | ITSM | DevOps | Cloud

CI CD

The latest News and Information on Continuous Integration and Development, and related technologies.

Scaling my application: am I ready?

Most applications begin with a small to medium-sized user base. Even with migration projects, you would not immediately open your new application to the entire existing user base. Instead, you would first test with some internal users, then open up to early adopters. Nevertheless, if your application is successful, at some point you will face the need to scale it. Nevertheless, if your application is successful, at some point you will face the need to scale it.

Skipping artifact downloads in Bitbucket Pipelines

Allowing steps to skip downloading artifacts has been a highly requested feature from our customers. You can now disable artifact downloading on certain steps that do not require any artifacts, which will allow faster builds and can reduce your costs as a result. Disabling artifact downloads during a step is as easy as switching off a flag. Note that these steps can still produce artifacts to pass down to future steps.

How to set up Software Security and Compliance for Your Artifacts

The simplest way to ensure the safety of all the open source (OSS) components used by your teams and sites, is with a software composition analysis (SCA) tool. You need an automated and reliable way to manage and keep track of your open source usage. With JFrog Xray, you can set up vulnerability and license compliance scanning built into your software development lifecycle (SDLC).

The essential steps to building your own DevOps pipeline

Keeping up with customer demand and staying ahead of the competition requires fast releases and efficient code. This is where DevOps comes into play. Where DevOps is the practice, mindset, and culture of combining software development (i.e. Dev) and IT operations (i.e. Ops) to accelerate the development lifecycle and provide continuous delivery without compromising quality.

Bitbucket Pipelines and OpenID Connect: No more secret management

Bitbucket Pipelines now allows you to talk to your favorite third-party applications without an access token or secret. You no longer need to store your secrets in Bitbucket Pipelines. You can generate an OpenID Connect token in Bitbucket Pipelines, and use that to talk to any third-party application that supports OpenID Connect.

Automate (and scale) your Android deployment with Bitbucket Pipelines

We’ve launched a new Android template in Bitbucket Pipelines. This template helps you automate building and testing an Android project in a Docker container, using Gradle as your build tool. Access the template code here or go to the Pipelines tab of your repo and select the Android template. This blog walks you through how this template is structured and has tips on how you can scale it.

CI/CD and Security Testing Automation with CircleCI and NeuraLegion

Join CircleCI and NeuraLegion for a hands-on workshop around automating CI/CD and Dynamic Application Security Testing (DAST). Benefits of CI/CD Benefits of shifting AppSec left What is Developer Focused DAST? How to automate DAST and CI/CD We'll utilize CircleCI orbs during a 50 minute hands-on workshop to integrate a NexPloit engine into a CircleCI pipeline. We'll cover tips for pipeline failure, recommit, and rescan. Lastly, we’ll review results in NeuraLegion's dashboard.

My Build, My Way | JFrog Pipelines Extensions

Once my new projects are almost ready to share with the team and I can build and test them locally, I’ll need a CI automation tool to test and deploy each release. As a Principal Consultant Declarative Systems, I’ve been recommending JFrog Artifactory to clients looking to bullet-proof their deployments since 2016. After considering different CI solutions, we found that JFrog Pipelines has the best integration with Artifactory which made choosing this platform a no-brainer.

Publishing a Python package

For many software engineers and developers, using standard libraries or built-in objects is just not enough. To save time and increase efficiency, most developers build on work done by others. Whatever the coding problem, there is likely another programmer who has already created a solution for it. There is usually no need to repeat the problem-solving process. This principle is known as Do not Repeat Yourself or DRY.