Featured Article
Top 10 open source projects hit by HTTP/2 'Rapid Reset' zero-day
DevSecOps for a Dollar or Less
3 minute read time
The DevSecOps Maturity Model (DSOMM) helps you analyze your organization's development pipeline to see where you need to improve.
Read More...
DevOps and Opportunities in Software Supply Chain Governance
4 minute read time
Governance has been an evil word for software developers but new approaches unlock massive gains in productivity, reductions in cost, improvements in quality.
Read More...
DevSecOps: Better Software, Faster
3 minute read time
1 in 16 open source and third-party components downloaded last year included a known vulnerability. That may not seem like too many until you realize the average company downloads well over 200,000
Read More...
All Day DevOps: Practitioner-to-Practitioner
2 minute read time
All Day DevOps will deliver 57 practitioner-led sessions over 15 hours and 15 time zones. No vendor pitches are allowed.
Read More...
All Day DevOps Conference: Bringing DevOps to the World
4 minute read time
November 15, 2016 will see the first truly global, online DevOps Conference: All Day DevOps. 15 hours, 15 time zones, 54 sessions, 3 keynotes.
Read More...
Government Asks: What’s in Your Software?
5 minute read time
Top performing development organizations embrace supply chain management best practices, including use of a Software Bill of Materials (BOM).
Read More...
An Insider's View: Analyzing Software Supply Chains
5 minute read time
2016 state of the software supply chain report reveals the volume of open source component usage and quantifies the presence of known vulnerabilities.
Read More...
Rugged DevOps: Survival is Not Mandatory
4 minute read time
Deming, the patron saint of DevOps once advised, “It is not necessary to change. Survival is not mandatory.” To survive, application development teams are constantly pressured to deliver software
DevOps Leadership Series: Security at Velocity [Video]
1 minute read time
If it does not fit, it does not get done. For many DevOps practices, application security falls into the “does not get done” bucket. That’s because for many DevOps-centric organizations, application