There are two important considerations when adding security to an existing DevOps pipeline. The first is security in code, which means, when code is developed, the security of the code itself should be continuously reviewed and assessed. The second is security as code, in other words, security requirements need to be part of the process from the beginning. Let's look at both of these concepts in a bit more detail ...

The 20% time has an almost mythical status. Popularized by Google, but with its roots actually stretching back to the 1940s, the basic concept is that 20 percent of an employee's paid time is dedicated to pursuing personal projects. The idea is that it creates a hotbed of innovation which might feed into company work and improve skills. In software development terms, the products that have their foundations in 20 percent are legendary ...

We all wish we could build, deploy, and run our applications without the stress of security concerns. However, the reality is that most of us will run into serious security or compliance issues at one time or another. When that happens, an organization is likely to experience the frustration of delayed application deployments and stifled agility. Containers and Kubernetes promise faster development cycles, quicker bug fixes, and increased velocity, but when security is an afterthought, organizations risk the very gains that containerization promises, particularly agility ...

To provide engineering teams with hard data on how their apps compare to others in the industry, Bugsnag recently announced the results of its new report, Application Stability Index: Are your Apps Healthy? ...

DevOps adoption is growing steadily as more organizations take advantage of these practices to empower IT teams to deliver applications and services at high velocity. Bringing together software development and IT operations is helping shorten the systems development lifecycle and provide continuous delivery. At the same time, organizations are finding themselves with a whole new set of challenges, including hiring and collaboration, especially as skill and talent shortages increase. The cloud, and specifically cloud desktops, can address many of these challenges ...

A new study from D2iQ reinforced the importance of Kubernetes, with 77% of organizations claiming that the container automation system is a central part of their digital transformation strategy. However, the same study found that while projects in production on Kubernetes are expected to rise 61% in the next two years, almost all organizations that use cloud native technologies have run into challenges, most commonly during the development phase ...

Let's go back to the fundamentals. That's actually a high hill to climb in the world of cloud computing: The field virtually mandates a nonstop flow of new tools and capabilities. Each advance surely adds to the already-long list of benefits to be accrued by moving to the cloud, but many also create serious risks. This fundamental incongruity can undermine the entire potential of this vital discipline. The latest Accurics research report, The State of DevSecOps, vividly highlights this ongoing issue ...