If you’re a Golang developer using Visual Studio Code, keeping at-risk Go Modules out of your apps just got easier, and for free. Today we’re announcing a new version of the JFrog extension for VS Code, available for free download. This integration brings live vulnerability information about every public Go Module you’re using directly into your source editor from the rich metadata of JFrog GoCenter.
The world of software drives digital innovation, and software delivery is increasingly being driven by JFrog. We’re honored and humbled to continue to grow alongside our customers. To enable our next leap ahead, we’re proud to announce that we’ve appointed key industry leaders as independent members of our Board of Directors that will assist us to further grow in the DevOps market.
In agile development, planning, coding, and builds are an ongoing loop. But when a circle is broken, you can’t travel it at full speed. For users of Atlassian Bitbucket Server and Jira, JFrog’s integrations can help Artifactory bridge the gaps for continuous velocity. In a previous blog post, we discussed how to provide Jira information as a critical “why” in your build information.
This blog post will provide you with information on how to use JFrog CLI with JFrog Distribution workflows. JFrog Distribution manages your software releases in a centralized platform. It enables you to securely distribute release bundles to multiple remote locations and update them as new release versions are produced. For those of you who are not yet familiar with the JFrog CLI, it is an easy to use client that simplifies working with JFrog solutions using a simple interface.
One of the exciting things about being a Golang developer today is the strong community that supports the evolution of the language that was developed at Google. The founders of Golang were open to getting engineers involved early-on and the community-centric approach has now become an asset to Go itself.
When software can travel around the globe at the speed of the cloud’s gusts, enterprises need to be extra certain the updates they release are safe for customers to use. If an app built in Palo Alto uses a vulnerable package from Belgrade, losses can ripple from Sheboygan to Shanghai. At JFrog, we believe enabling global DevSecOps in the cloud should be an easy process.
Some things, like high-end coffee or enterprise technology, are worth working and waiting for. But if you can get quality without the effort or delay, wouldn’t you? Installing or updating a self-managed (BYOL), High Availability edition of JFrog Artifactory hosted in an Azure VM can be a complex, and time-consuming process.
In times of crisis and challenge, the best in humanity comes out. We all want to help, we all want to pitch in and we all desire safety and health for our loved ones and communities. And we ideally want to assist genuinely – in a way that helps others without strings attached. JFrog is no different.
As continuous software deployments grow and become the accepted standard, security measures gain even more importance. From development and all the way through to production, security requirements should be adopted by all teams in an organization. JFrog IDE integrations provide security and compliance intelligence to the developer right from within their IDE.
Go modules have helped bring order to Go development, but there’s been some disorder lurking. Managing module pseudo-versions can be difficult, especially with some of the latest changes to Go. JFrog GoCenter, the free repository of versioned Go modules, now includes some important updates that can help you stay on course. Let’s take a look at how pseudo-versions work, and what you can expect from those changes.
