Operations | Monitoring | ITSM | DevOps | Cloud

CI CD

The latest News and Information on Continuous Integration and Development, and related technologies.

Spotting Vulnerabilities at Rest and at Runtime feat. Cloudsmith and Sysdig

The rise and popularity of containers and Kubernetes have revolutionised the IT industry but also introduced a lot of complexity including a huge number of vulnerabilities coming from different container image layers. To master those vulnerabilities both DevOps and Security teams are struggling to prioritise and address them, often without sufficient clarity or accountable insights.

Decoding the Difference: Artifacts vs Packages in Software Development

"Artifact" and "package" are often used interchangeably, but they have distinct differences. Understand their unique roles, learn through practical examples, and discover why distinguishing between them is vital for effective software management and distribution. "Artifact" and "package" are often used interchangeably, but they have distinct differences.

Celebrating Success: Cloudsmith Recognized by G2

Cloudsmith celebrates being honored with two prestigious G2 awards: "Best Relationship Summer 2023" and "High Performer Summer 2023". Discover how our commitment to exceptional customer service and a best-in-class software supply chain management platform earned us these badges. Cloudsmith celebrates being honored with two prestigious G2 awards: "Best Relationship Summer 2023" and "High Performer Summer 2023".

Machine Learning CI/CD with AWS Sagemaker

There are many benefits of incorporating CI/CD into your ML pipeline, such as automating the deployment of ML models to production at scale. The focus of this article is to illustrate how to integrate AWS SageMaker model training and deployment into CircleCI CI/CD pipelines. The structure of this project is a monorepo containing multiple models. The monorepo approach has advantages over the polyrepo approach, including simplified dependency versioning and security vulnerability management.

Merging to Main #4: Feature Flags

Feature Flagging comes with many benefits, like testing new features in a live environment without exposing them to all users, rolling back changes quickly if something goes wrong, and helping isolate the feature development process from deployment so you can better manage your dev cycles. Like everything in the CI/CD world, all features and tools require careful consideration. You want to avoid creating additional tech debt and complicating your codebase, and you certainly want to avoid introducing unnecessary work to a likely already overworked team.

Let your engineering team delegate toil to the robots with automated actions

If you want to make software engineering easy to improve, then automate actions in your development process. These simple yet high-impact “if this, then that” conditions pack a punch toward reducing toil and cognitive load. Your developers choose what’s important to improve and reap the benefits of an efficient and optimized development environment.

The Latest JFrog Plugin for Jenkins

We all know that artifact management is an important part of our development lifecycle, and if you’re using Jenkins you’ll also need to store your builds and binaries. In the world of DevOps, efficient integration and management of artifacts and dependencies are crucial for successful software delivery. Together, Jenkins and JFrog Artifactory offer a powerful combination for streamlined build processes.

Improving discoverability of the git blame functionality on Bitbucket Cloud UI

We are making git blame feature more discoverable on the Bitbucket Cloud UI. A very useful feature of git, git blame has been available on the Bitbucket Cloud UI for years. Similar to how git blame works with git, on Bitbucket Cloud it annotates each line in the given file with information from the commit which introduced the line.