Operations | Monitoring | ITSM | DevOps | Cloud

CI CD

The latest News and Information on Continuous Integration and Development, and related technologies.

JFrog & Lightrun Webinar: Continuous Observability & Continuous Debugging

Join JFrog’s Baruch Sadogursky and Lightrun’s Tom Granot as they investigate how high-performing engineering teams remain agile throughout the entire software production lifecycle, from development through deployment and all the way to observing and maintaining high-quality production systems at scale.

Infographic: Accelerating Trusted Distribution of Software Innovation, Everywhere

Research firm IDC has recently published an infographic (check it out below!) outlining the new requirements for modern software distribution and key guidance for organizations to meet future needs and overcome the bottlenecks in the next era of large-scale application delivery. With the advent of DevOps and modern delivery practices, organizations are becoming better at rapidly developing and deploying new applications to better serve their customers and stay competitive in today’s digital age.

Using the DigitalOcean Container Registry with Codefresh

DigitalOcean has just announced the DigitalOcean Container Registry, which is directly integrated into the DigitalOcean Dashboard. While you can use any Container Registry in your DigitalOcean resources, the goal of the Container Registry is to provide for easy connection between the Container Registry and DigitalOcean Kubernetes resources.

Accelerating Artifacts Distribution Across Repositories and Runtime Environments

When your remote offices around the world can’t get their hands on the most recent builds fast enough for continued testing, when your infrastructure nodes can’t download Bill-of-Materials (BOM) of 1,000s GBs in order to start a release deployment, or when your customers and developer ecosystem can’t download your recent drivers, plugins or OSS in a reliable manner -- productivity and release velocity suffer. Artifacts distribution across remote locations and hyper-scale hybrid environments has become increasingly more challenging in the last couple of years, due to recent trends in modern software delivery.

Combining Progressive Delivery With GitOps and Continuous Delivery Through Argo CD, Argo Rollouts, and Codefresh

Progressive delivery is arguably the most reliable and advanced set of deployment practices based on a simple idea. Instead of shutting down the old release and deploying a new one in its place, progressive delivery takes an iterative approach. It gradually increases the reach of a new release. That gives us quite a few benefits like zero-downtime deployments, reduced blast radius, increased security, and so on and so forth. I will not go into depth about what progressive delivery is.

Designing Complex Components in Figma: Our Build Record

Figma is a web-based graphic editor and prototyping tool that is commonly used for UI design. Independent of the size of your organization, it is considered good practice to use design components. This post provides a case study on how we utilize Figma components to manage different states in the Codefresh UI. Note that this blog post was written before the release of variants and the new auto-layout features. We will update the blog after we update our style guide with these new amazing features.

Adding Helm Chart Security Mitigation Notes to ChartCenter

Earlier this year, we launched ChartCenter, our newest community platform to help Kubernetes developers find Helm charts. This new free Helm central repository was built with chart immutability  in mind— meaning every version of a Helm chart and every version in ChartCenter will always be available even if the original source goes down.

CI/CD Detection Engineering: Failing, Part 3

It was over a month ago that I promised we would tie together Splunk Security Content and the Splunk Attack Range to automatically test detections. Ultimately, using these projects together in a Continuous Integration / Continuous Delivery (CI/CD) workflow with CircleCI brings the rigors of software development to the SOC and truly treats 🛡detection as code. Well, I want to share how we have failed at achieving this goal.