Derek Weeks

Derek serves as vice president and DevOps advocate at Sonatype and is the co-founder of All Day DevOps -- an online community of 65,000 IT professionals.

Securing software supply chains and dependency confusion — An industry perspective

By Derek Weeks on March 08, 2021 featured

29 minute read time

We sat down with experts from The Linux Foundation, Atlantic Council and Sonatype's own CTO to discuss recent software supply chain attacks, dependency.
Read More...

White House releases executive order on America's software supply chains

By Derek Weeks on February 25, 2021 secure software supply chain

3 minute read time

Following recent SolarWinds attacks on multiple government agencies, US President Biden calls for comprehensive reviews of software supply chains.
Read More...

The SolarWinds software supply chain attack: How developers can protect applications

By Derek Weeks on December 22, 2020 vulnerabilities

8 minute read time

The SolarWinds software supply chain attack has made it clear that open source developers need to act now and intelligently manage third party dependencies to.
Read More...

Introducing our 2020 State of the Software Supply Chain report

2 minute read time

Sonatype's 2020 State of the Software Supply Chain Report shows that faster innovation and better risk management do not have to be mutually exclusive.
Read More...

Money doesn't buy happiness, but happy developers protect money

By Derek Weeks on June 26, 2020 devsecops

4 minute read time

Developers in mature DevOps practices are 1.2x happier than their grumpy peers in the financial sector. This impacts software security, and your wallet.
Read More...

Update: 21 SaltStack breaches with 2,900 still vulnerable

By Derek Weeks on May 31, 2020 vulnerabilities

7 minute read time

When a vulnerability is announced in an open source project, ask immediately: have we ever used that open source component, and (if yes) where is it?
Read More...

Free DevOps: Hatched in Response to COVID-19

By Derek Weeks on April 11, 2020 all day devops

2 minute read time

All Day DevOps | Spring Break required organizing an online DevOps conference in 30 days for 4,000 people. It launches this Friday and is free to attend.
Read More...

Happy Developers Produce More Secure Software, Better Business Outcomes

By Derek Weeks on April 07, 2020 vulnerabilities

3 minute read time

The 2020 DevSecOps Community Survey confirms correlations between DevSecOps culture and practices, and their influence on motivation and job satisfaction.
Read More...

Continuous Delivery For All

By Derek Weeks on December 24, 2019 Continuous Delivery

4 minute read time

Jez Humble addresses the four reasons he consistently hears why continuous delivery won't work in their organization -- and busts all the myths.
Read More...