Development
A Modern Development Stack Makes Work More Fun
One of the many things I like about working at Cequence, over and above the protection value we provide our customers, is our commitment to using modern application development tools like Kubernetes, ...
DevSecOps with Atlassian Bitbucket
DevSecOps with BitbucketThis article was originally published at ShiftLeft Blog.In my inaugural post on DevSecOps with GitHub, I made an assertion that achieving good productivity is a continuous journey and a shared ...
DevOps productivity series — GitHub for DevSecOps
GitHub & DevSecOps Productivity TipsThis article was originally published at ShiftLeft Blog.My colleague Andrew Fife wrote about our passion to focus on developer experience and productivity with our NextGen Static Analysis platform ...
An Oxymoron : Static Analysis of a Dynamic Language (Part 4)
An Oxymoron : Static Analysis of a Dynamic Language (Part 4)Taint Flow challenges in a world of untyped and async event handlingFrom the previous post we concluded that type-checking at compile-time can ...
Thoughts on the state of enterprise open source
“Open source is bad since it’s full of security vulnerabilities, unmaintained dependencies and poor documentation,” said this security vendor as they began their opening speech before delving into their product that offered ...
Moving Fast Without API Guardrails?
In 1999, Bruce Schneir wrote, “complexity is the worst enemy of security.” Today, I’d argue that speed may be overtaking that top spot or coming darned close. There were two stories published ...
Are we ready for Cloud Workspaces?
TL;DR - Yes, we are getting there, and we ❤️ them already!IntroductionWeb-based IDEs such as GitHub & Visual Studio Codespaces (originally Visual Studio Online), Gitpod based on Eclipse Theia are now offering ...
Your 2019 Essential Software Security, Development, & DevOps Conferences
“DevOps” encompasses a wide range of topics – throw security in there and you’ve added even more. This roundup includes events throughout the year and around the globe, from small events to ...
People: The Critical Element in DevSecOps
In his talk, “DevOps is Automation, DevSecOps is People,” at the 2018 Security Congress in New Orleans, Mike Shema, CISO at Colbalt.io, said there needs to be a more collaborative approach when ...
Site Reliability Engineering – From DevOps to NoOps
Site Reliability Engineering (SRE) is a practice that combines software development skills and IT operations into a single job function. Automation and continuous integration and delivery are used to reach the goal ...
