Oracle announced plans for Oracle Code Assist, an AI code companion, to help developers boost velocity and enhance code consistency.
As we start off 2018, it is obvious that the culture of DevOps in the enterprise is here to stay, but what of DevSecOps? From continued adoption of API-first solutions to core code development, below I discuss a few predictions I see on how DevOps and SecOps will further entwine in addition to how related technologies will evolve and impact business in 2018.
DevOps
The term "DevOps" continues to be used in too many situations and descriptors. For me, it's a cultural pattern grounded by "Collaboration, Automation, Measurement, and Sharing" (CAMS). In 2018, I think we will begin to see DevSecOps become the new DevOps. Security truly needs to be seamlessly embedded into the systems development life cycle (SDLC) and CI/CD pipeline, instead of an afterthought and a barrier to deployment.
Development Technology
2018 will see continued adoption of API-first solutions, microservices architectural patterns and more developers leveraging "Serverless" function as a service (FaaS) to deliver features at a higher velocity. Strategies around Machine Learning models to deliver AI solutions will be baked in from the start of a project.
Development Automation
Core code development won't be going away anytime soon, but more and more automated solutions that ensure that packages and libraries are always at the latest version will be adopted. The goal of automation will be focused on allowing developers to only worry about the core features that they are working on, not maintaining the "scaffolding."
Agile Development
It's surprising how many organizations still haven't (fully) adopted Agile methodology, and many are still simply "Wagile" (Waterfall-Agile). In 2018, Continuous Delivery will become table stakes for those who want to stave off disruption.
Continuous Development
The combined approaches of Continuous Integration, Continuous Delivery, Continuous Testing, and Continuous Deployment will continue to be implemented by Enterprises looking to deliver features to market at a higher velocity. This will also require cultural evolution where collaboration and feedback loops are tighter.
API (Application Program Interface)
Restful APIs should be a core part of solutions, especially as everything, including infrastructure, moves to a software-defined, programmatic world. APIs also allow for rapid integrations with potential partners and business expansion.
Industry News
New Relic launched Secure Developer Alliance.
Dynatrace is enhancing its platform with new Kubernetes Security Posture Management (KSPM) capabilities for observability-driven security, configuration, and compliance monitoring.
Red Hat announced advances in Red Hat OpenShift AI, an open hybrid artificial intelligence (AI) and machine learning (ML) platform built on Red Hat OpenShift that enables enterprises to create and deliver AI-enabled applications at scale across hybrid clouds.
ServiceNow is introducing new capabilities to help teams create apps and scale workflows faster on the Now Platform and to boost developer and admin productivity.
Red Hat and Oracle announced the general availability of Red Hat OpenShift on Oracle Cloud Infrastructure (OCI) Compute Virtual Machines (VMs).
The Software Engineering Institute at Carnegie Mellon University announced the release of a tool to give a comprehensive visualization of the complete DevSecOps pipeline.
Synopsys has entered into a definitive agreement with Clearlake Capital Group, L.P. and Francisco Partners.
Postman released v11, a significant update that speeds up development by reducing collaboration friction on APIs.
Sysdig announced the launch of the company’s Runtime Insights Partner Ecosystem, recognizing the leading security solutions that combine with Sysdig to help customers prioritize and respond to critical security risks.
Nokod Security announced the general availability of the Nokod Security Platform.
Drata has acquired oak9, a cloud native security platform, and released a new capability in beta to seamlessly bring continuous compliance into the software development lifecycle.
Amazon Web Services (AWS) announced the general availability of Amazon Q, a generative artificial intelligence (AI)-powered assistant for accelerating software development and leveraging companies’ internal data.
Red Hat announced the general availability of Red Hat Enterprise Linux 9.4, the latest version of the enterprise Linux platform.