Operations | Monitoring | ITSM | DevOps | Cloud

DevOps

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Patching Go's leaky HTTP clients

In November 2023 we discovered an issue in the Go standard library’s net/http.Client that allowed an attacker who controls redirect targets on a server to exfiltrate authentication secrets. Soon after, we discovered a similar issue in net/http/cookiejar.Jar. The issues, collectively designated CVE-2023-45289, have now been fixed in Go 1.22.1 and Go 1.21.8, released on March 5, 2024. This blog post dives into the technical details behind those two bugs and the patch that addresses them.

Standardizing your web application stack and how to do it

Managing web applications from the ground up can be a daunting task. One application alone can quickly grow in complexity, let alone the multiple applications that are often required by different business units and stakeholders growing simultaneously. Add the ever-changing landscape of trendy frameworks and runtimes, and you quickly find yourself with an unmanageable mess of different technologies. Standardizing your application stack can help reduce the clutter.

New Integration: Cycle.io and Depot.dev Team Up for Enhanced Docker Builds

In our continuous mission to improve development workflows and operational efficiency for our users, Cycle.io is thrilled to announce a new partnership with Depot. This collaboration is set to revolutionize how organizations build images, focusing on accelerating the Dockerfile build process. "I'm particularly excited to add this integration to Cycle's platform.

Know Before You Go : KubeCon EU 2024

Let's face it - major global conferences like KubeCon + CloudNativeCon can be intimidating and exhausting to navigate, whether you're a newbie or a veteran. As an international attendee, add in travel, jetlag, and a bunch of other stuff and what you get is a recipe for a stressful week. Join Robert Sirchia as he hosts Aurelie Vache and Cyril Cuvier to learn how you can make the most of the upcoming KubeCon + CloudNativeCon in Paris.

Know Before You Go: Cloud Native Rejekts

You may have heard of KubeCon, but have you met its cool & edgy sibling, Cloud Native Rejekts? A human-sized conference that offers speakers the opportunity to upcycle their rejected KubeCon sessions, this one is truly curated for the community, by the community. Join Divya Mohan, our Principal Technology Advocate and first-time attendee, as she hosts Benazir Khan, one of the organisers, to learn what you can expect from the conference, some behind-the-scenes banter, and much more on this Know Before You Go episode.