With the release of the JFrog DevOps Platform, we launched the first general availability of JFrog Pipelines, our powerful system for next-generation CI/CD. Pipelines’ many great features help make DevOps pipelines automation rapid, repeatable, and secure. With flexible runtime management, a robust DSL, and a real-time interactive UI, Pipelines is a muscular CI/CD solution we know you’ll love. But what makes Pipelines different?
Thousands of devices means thousands of software components, metadata items, and builds. Coordinating all that data for an Internet of Things system requires a binaries manager built for reliability and scale. That’s the challenge that faced MicroEJ, a software vendor of cost-driven solutions for embedded and IoT devices.
In today’s enterprises, DevOps isn’t one process, but many thinly connected tasks. A stack of DevOps tools that need to work together to operate as a single system, each one requiring its own integration and maintenance. The JFrog DevOps Platform unifies our industry-leading products because DevOps has a single goal: to speed releases from code to production. It takes several tools to build DevOps, but DevOps tools need to function as one.
Unity is strength. And at JFrog, we’re committed to providing the strongest DevOps tools available. With the promised release of the JFrog DevOps Platform, it’s my honor and delight to announce JFrog’s biggest leap yet toward fulfilling our universal vision of Liquid Software. We’re excited and proud to launch the world’s first universal, hybrid, end-to-end DevOps platform.
In our previous blog post we discussed the challenges with relying on external servers for downloading pre-build tools such as Curl, CLI, wget, Maven, Gradle, npm and others. We discussed how they can sometimes cause stability issues, also called “Environmental Issues”, that will break the build.
For some organizations, even the best isn’t quite enough. That’s why JFrog Xray provides a way for you to specify your own additional data, to detect even more sensitive issues in your binaries before they can reach production. JFrog Xray is a tool for DevSecOps teams to gain insight into the open source components used in their applications.
We’re excited to announce the new and improved ConanCenter! Use our new center with an enhanced UI experience to discover your favorite Conan C/C++ packages. If you’re not familiar with Conan yet, it’s a decentralized package manager for C/C++ that empowers developers to share packages through a push-pull model similar to Git. ConanCenter is a central repository for open source Conan packages, created and maintained by JFrog.
Golang developers care a lot about security and as Go modules become more widely used, they need more ways to assure these publicly shared files are safe. One unique feature included with Golang version 1.13 is the foresight that went into authentication and security for Go modules. When a developer creates a new module or a new version of an existing module, a go.sum file included there creates a list of SHA-256 hashes that are unique to that module version.
In the holiday spirit, we’re bringing a little cheer to the Golang community by celebrating the achievements of some noteworthy Go module authors. We’re excited to launch a new program within JFrog GoCenter that honors select “Top Gophers.” Using key metrics of success such as number of downloads and imports, quality metrics, and usage in GoCenter, we aim to highlight projects that we think are really helping improve software development for the Go developer community.
In recent weeks, some of the most recognizable companies in the DevOps space have had their foundations rattled, perhaps shaking developer confidence. The acquisition of Docker Enterprise by Mirantis, the acquisition of Sonatype (Nexus) by a capital firm and the open-sourcing of Quay by Red Hat leave many development shops wondering what will happen next with their strategic tool choices.
