By: Christopher Lazzaro, Andrea C. Crawford DevOps is not new. The first DevOps Days conference was held in Ghent, Belgium in 2009. Hudson (the precursor to Jenkins) turned 15, in February 2020. Although its been a while since the early days of DevOps (remember these 2009 throwbacks?) — we have…

I don’t think there is anyone that reads this blog and is not somehow affected by COVID-19. Today, things just got real on a totally new level. — Monday…was the Day 1 of “distance learning” for my 11 year old son. I knew this day was coming, but I left dealing with this first time reality to Monday morning. (Hey, denial ain’t just a river in Egypt). My son got up at 9am with his alarm clock (a…

Secure delivery is all about how an application or product progresses down the release pipeline and mitigates the risk of exposure to vulnerabilities, detection of defects, and establishing traceability of significant events. Do you have a *documented* release pipeline? Have you defined a governance model for the release pipeline —…

What does a secure application actually look like? There are some pretty interesting sources that bring richness to a “secure by design” approach. In the context of DevSecOps, which I introduced in my last blog, design and development of secure apps is a key consideration. The Rugged Manifesto is something…

A blog series on DevOps through the lens of security — While I love the satisfaction of securely delivering robust applications, I do not like the term “DevSecOps”. DevSecOps is approaching DevOps through the lens of security. In this context, security means engineering secure delivery of robust applications on secure platforms. So, why do I not like DevSecOps as a term…