Operations | Monitoring | ITSM | DevOps | Cloud

CI CD

The latest News and Information on Continuous Integration and Development, and related technologies.

Incident response: leadership & psychological safety with Jeli founder Nora Jones

Incident response can tricky. How do you create a culture prepared to handle it in a healthy and efficient way? What should and shouldn't leaders be involved in? How do you create a psychologically safe environment? Find out in this episode as Rob as he interviews Jeli founder Nora Jones on the do's and don'ts of incident response.

Code quality metrics: How to evaluate and improve your code

High-quality code is efficient and reliable, runs well without bugs, and meets user needs. It can cope with errors or unusual conditions. It is also easy to understand, maintain, and expand with new features. Additionally, its portability means that it can run on as many machines as reasonably possible. Development teams work with codebases that are constantly changing. They add, delete, and modify existing code to improve speed or implement new features.

Beyond CI/CD: The Software Supply Chain Is the Enterprise Path to Production

For those managing enterprise software development organizations, the concept of software supply chains—that is, the set of sources and actions that take software from “raw materials” to a finished product—might represent an abstract concept. While this definition is essentially correct, it doesn’t do enough to explain how supply chains can be complementary to your existing continuous integration and continuous deployment (CI/CD) environments.

Creating snapshots in Jest for testing React applications

Automated tests are especially important in large applications that have lots of moving parts. It is smart to learn about many methods of testing applications so that you can provide as much coverage as possible. If you are not familiar with using snapshots in testing, read on. Snapshot tests are written as part of frontend test automation.

Are metrics vendors lying? Reaction to Gergerly Orosz's tweet

Gergely Orosz said measuring developer productivity by visualizing JIRA+git stats is a dead-end if you want truly high-performing teams, and that engineering managers hang on to this hope, fueled by vendors claiming how these tools helps teams ship better/faster. So are metrics vendors lying? Find out what Don has to say. SLEUTH A deploy-based DORA / Accelerate Metrics tracker both managers and developers love.

Standardizing your GitOps Definition - Ravi Lachhman, Shipa (Meetup for Argo)

Believe it or not, the GitOps paradigm is now going on year five since the defining piece from WeaveWorks. So, at least in theory, leveraging a declarative approach that pairs Kubernetes with GitOps pillars is not novel at this point. But the trickier question right now – and one open to no shortage of interpretation – is what you are sending to a GitOps Engine. The multiple paths of creating Kubernetes manifests and packaging (like Helm, Kustomize, JSonnett, etc) are largely leaving us to our own devices for abstraction. Is an app an app if there is no longer a templating engine?

Cloud-Hosted or Cloud-Native? Discover Why Cloudsmith Was Born in the Cloud

Today, almost every service now is offered in a “Cloud” variant. But what does that really mean? Are all clouds services equal? It’s easy to see why so many vendors rush to add a Cloud edition/variant of established software they sell. Undoubtedly, there has been a move to Cloud services across the industry, as more and more organizations seek to take advantage of the higher reliability and lower total cost of ownership that Cloud platforms promise.

Efforts to Secure OSS fired up after Log4Shell

Who would have thought software could rattle the White House? But a vulnerability in Log4J, a popular open source software project, exposed critical digital infrastructure to remote code execution attacks. This prompted the US Government to engage big tech, infosec professionals, and open source organizations to come together to help secure open source software.

DevOps Horror Stories: Repository of Horror

Just when you thought it was safe to go back in the water... Is there anything more frightening than the unknown? Anything the mind can conjure up is frequently scarier than something realized. The shark in Jaws is terrifying because you don’t see it until it’s too late. It’s a silent, relentless death machine, hiding in the water. A software vulnerability is the unknown, hidden deep within an ocean of code, packages and container dependencies.