Influence of CI/CD On Security. Subscribe to get the latest updates on container-native & DevOps news here.
A report says that the combined practice of continuous integration and continuous delivery (CI/CD) is a leading indicator of an organization’s adoption of advanced practices associated with software supply chain security. Almost two-thirds of respondents said CI/CD was very or completely established in their organization.
According to Google’s DevOps research, software developers are twice as likely to find a vulnerability in their code if they use tools that scan for it. The most popular security-scanning tool was application-level security scanning, the study found. It can be automated in CI/CD systems.
“Without continuous integration in place, it’s probably difficult for an organization to ensure that they’re running a consistent set of scanners, linters, and tests against the software artifacts they create,”
said Claire Peters, lead researcher on Google Cloud’s DevOps Research and Assessment (DORA) team.
Automated security scanning is the most common security practice among respondents to Google Cloud’s DevOps Research and Assessment (DORA) survey. Organizations that use these tools are nearly twice as likely to report identifying a security vulnerability in their code or one of its dependencies. Read the full article.
Top Picks for you this week
Is It Time to Rethink DevSecOps After Major Security Breaches?
Collaboration between operations, security, and development may increase the efficiency of software development, but some reevaluations may be necessary.
DevSecOps is a variant of DevOps that adds security to the software development workflow. Application Programming Interfaces (API) security needs to be part of DevSecOps, and this article explores how it works and what role it plays in making applications as secure as possible.
Important Events
[Virtual Event] O3DCon–Oct 17–19, 2022 Austin
This conference is for 3D developers, users & enthusiasts to collaborate and share knowledge to shape the future of 3D development.
Cloud Native eBPF Day North America– Oct 24, 2022
A vendor-neutral conference that explores this transformational technology and its impact on the future of Cloud Native.
Cloud Native SecurityCon North America–Oct 24–25, 2022
An event designed to foster collaboration, discussion, and knowledge sharing of cloud-native security projects and how to best use them to address security challenges and opportunities.
Career Opportunities
Business Development Manager-Cloud Solution Apply Now
RazorOps is looking for a highly talented sales manager to grow our SaaS business.
Kubernetes Developer and Admin Apply Now
RazorOps is looking for highly talented, hands-on Kubernetes developers to help accelerate our growing Professional Services consulting cloud and DevOps practice.
Senior Golang Developer Apply Now
We need a strong, battle-tested Golang developer with experience developing the Kubernetes operator SDK and runtime controller
