<iframe src="//www.googletagmanager.com/ns.html?id=GTM-TT8R4P" height="0" width="0" style="display:none;visibility:hidden">

Sonatype Blog

Stay updated on the latest news from the makers of Nexus

Set up your own Continuous Delivery Stack

Last week I wanted to try new things with ‘pipeline as code’ with Jenkins. The best way to try new things is running it as Docker containers. This way I can keep my MacBook clean and don’t mess up existing stuff I am working on (also see this article about what Docker can offer for a developer). Another big advantage by using Docker is that there is already a complete stack of Dockers available to set up the necessary tools. However, for some unclear reason this stack didn’t work on my MacBook (see this issue) so I took this opportunity to build my own stack with some Dockers of my own choice :-).
The tools in my stack are:

When it Comes to Application Security, “Doing Your Homework”​ Matters

They say software is eating the world, very true, but it has become even more clear that OSS components are eating the software world. This amazing revolution is driving unimagined gains in innovation and efficiency in our ability to deliver software. Think Uber, here is a new leader in the transportation industry without owning a single vehicle. Every major Enterprise and even most medium and small companies are software producers – and free and open software components are driving this dramatic shift in our world.

Improving Build Time of Java Builds on OpenShift

Improving Build Time of Java Builds on OpenShift

Since we released OpenShift 3 back in July 2015, one of the most common questions I get from developers is how to get better build time for Java based builds. In this post, I will guide you through the process of speeding up Java Maven based builds, and will explain other options that can be taken to the ones that I’ll be showing.

DevSecOps is Suddenly Strategic for Everyone in Software:  Here's Why

Software innovation is the core of every company's digital transformation; the strategic weapon by which modern organizations compete and win on a global playing field.  This is why executives and shareholders at every company, in every industry, are placing intense pressure upon IT teams to accelerate innovation.  

This insatiable demand for innovation has created a perfect storm which is wreaking havoc on many IT organizations around the world.   To counter the effects of this storm, forward leaning organizations have embraced DevOps as the preferred methodology for manufacturing quality software at scale and continuously delivering innovation.

Organizations everywhere are now transforming their development from waterfall-native to DevOps-native tools and processes.  Along the way, they are coming to grips with one simple fact:  DevOps is not an excuse to do application security poorly; rather it is an opportunity to do application security better than ever.

This realization is the reason why DevSecOps in suddenly strategic for anyone and everyone in software.

AppSec EU 2017 Belfast – What to Expect

In mid-May I’ll be joining the organizing team of AppSec EU 2017 in Belfast for a week of security and DevOps sessions. Listen in as Gary Robinson, Michelle Simpson and Owen Pendlebury talk about what’s planned for the week.

Using Nexus 3 as Your Repository – Part 3: Docker Images

This is the third and last part of a series of posts on Nexus 3 and how to use it as repository for several technologies. (Part 1. Part 2.)

Culture Hacking at RSAC 2017 with Shannon Lietz

On Monday, February 13, Shannon Lietz gave a quick, 20 minute overview of her investigations and implementation of Culture Hacking at Intuit. Below is the extended version of that presentation, including audio and the slide deck. Shannon will continue this discussion at her keynote presentation during AppSec EU 2017 in Belfast.