Java serialization - The gift that keeps on taking (Part 1)
6 minute read time
Log4Shell impels us to review the reasons Java needs serialisation, how to use it safely, and what other options exist. Here in part 1, we examine design.
Read More...
New Sonatype Scan Gradle Plugin
3 minute read time
The newest free plugin in the Sontaype toolbox is a Gradle plugin to scan, evaluate, and audit Gradle project dependencies. It is available now on GitHub.
Read More...
Continuous Integration in Pipeline as Code Environment with Jenkins, JaCoCo, Nexus and SonarQube
5 minute read time
The setup for a Continuous integration pipeline... this is for mavenized Spring boot build with JaCoCo coverage reports and Sonar metrics.
Read More...
All Things Maven: A Discussion with Brian Fox
21 second read time
In this episode, you will hear the history of Maven Central, war stories, how Minecraft DDoSed the service, and plans for the future of Maven and Java 9.Special
Read More...
Struts2 Exploited Again. Did Anyone Bother to Tell You?
5 minute read time
This week I woke up to find several emails from Nexus Lifecycle indicating that the products in my portfolio were potentially vulnerable due to their.
Read More...
Improving Build Time of Java Builds on OpenShift
14 minute read time
I will guide you through the process of speeding up Java Maven based builds, and will explain other options that can be taken to the ones that I’ll be showing.
Read More...
Nexus Repository 3.0: Most Frequently Asked Questions - Answered
8 minute read time
Nexus Repository 3.0 has hit the streets and is now available to all for free. What's changed? Check out the most frequently asked questions and see.
Read More...
Did You Wake Up to an Alert About the Java Deserialization Vulnerability?
4 minute read time
This week I woke up to find several emails from Nexus Lifecycle indicating that the products in my portfolio were potentially vulnerable due to their.
Read More...
