Database source control using Flyway, a summary - Scott Sauber
Scott Sauber, Director of Engineering at Lean TECHniques Inc., recaps his experience of how organizations use Flyway to source control the database in different scenarios.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on DevOps, CI/CD, Automation and related technologies.
Get Cybersmart with JFrog This October
We live in a world of increasingly connected devices – phones, digital assistants, smart watches, cars, thermostats, refrigerators, windmills, and more. More than 50% of the world’s population is now online and two-thirds own a mobile device, according to the World Economic Forum. Additionally, the codebase of today’s applications typically consists mainly of open source components – exposing them to greater risk of hacking than ever before.
23andMe's Yamale Python code injection, and properly sanitizing eval()
JFrog security research team (formerly Vdoo) has recently disclosed a code injection issue in Yamale, a popular schema validator for YAML that’s used by over 200 repositories. The issue has been assigned to CVE-2021-38305.
The Aftermath of the Facebook 6-Hour Outage
Less than 24 hours ago, the world came to a “social standstill” as Facebook, and its sister companies, WhatsApp and Instagram, became unavailable, leaving its 3.5 billion users in a flap. The outage, which lasted almost 6 hours, shut off access for users and businesses all over the world and caused ripple effects that we will likely continue to see in the immediate (and perhaps not-so-immediate) future.
Why we founded Komodor? Founders video
Komodor is disrupting how modern teams troubleshoot Kubernetes. Listen to the founders Ben Ofiri and Itiel Shwartz and learn more about the missing piece in your DevOps toolchain.
Adding Search to Rails with MeiliSearch
There are many ways to add search functionality to a Rails application. While many Rails developers choose to use the native search functionality built into popular databases like MySQL and Postgres, others need more flexible or feature rich search functionality. ElasticSearch is probably the most well known option available but it has its own issues. Firstly, it is a resource hungry beast. To run ElasticSearch properly in production, you need a few beefy servers.
Cloud 66 Feature Highlight: Registered Servers
What are Registered Servers? Registered Servers are a simple way to create a pool of servers on private and public cloud that can be used on any stack and configuration. Applications can be deployed across a hybrid of cloud and registered servers, in this way you could have a dedicated server for your database and burst cloud servers for your front end.
PagerDuty Integration Spotlight: HashiCorp Terraform
Manage your PagerDuty account objects with Terraform! Reap all the benefits of infrastructure as code and give your teams the flexibility they need to manage their services in real time. As infrastructure stacks grow increasingly more complex and involve an ever-growing number of services and systems, teams have looked to abstract configuration to its own layer of code. This concept of configuring infrastructure as code is gaining traction throughout the industry for a variety of reasons.
How to mitigate the 0-day Apache path traversal vulnerability with Puppet or Bolt
Apache has disclosed a critical actively exploited path traversal flaw in the popular Apache web server, version 2.4.49. This path traversal means that an attacker can trivially read the contents of any file on the server that the Apache process has access to. This could expose highly sensitive information, even as critical as the server's own private SSL certificates. See the Sonatype blog for more technical information on the vulnerability.
Moogsoft Anomaly Detection
Pinpoint the root cause to reduce downtime with Moogsoft anomaly detection.