Spring4Shell – by the numbers

By Ilkka Turunen on April 04, 2022 component vulnerability

6 minute read time

Spring4Shell, a new 0-day RCE, is not quite as bad as Log4shell but has a wide blast radius. We dive into the numbers on how the world is fixing the issue.

Continuous Integration in Pipeline as Code Environment with Jenkins, JaCoCo, Nexus and SonarQube

By Rahul Vishwakarma on January 17, 2018 github

5 minute read time

The setup for a Continuous integration pipeline... this is for mavenized Spring boot build with JaCoCo coverage reports and Sonar metrics.

How to Deploy the Artifacts of a Project to Nexus, with Maven

By Eugen Paraschiv on January 03, 2018 spring

13 minute read time

How to deploy the artifacts of a project to Nexus, with Maven. By default, Maven handles the deployment mechanism via the maven-deploy-plugin.

The 2014 Survey: Marked by an Industry Shock Wave

2 minute read time

Wow! What an amazing turnout we had for our 4th annual survey: 3,353 participants this year brings us to over 11,000 participants in the four years we’ve run this survey. I would like to extend a BIG