Continuous Delivery and Security

What is CI/CD? Continuous integration and continuous delivery explained

InfoWorld

APRIL 1, 2024

Continuous integration (CI) and continuous delivery (CD), also known as CI/CD, embodies a culture and set of operating principles and practices that application development teams use to deliver code changes both more frequently and more reliably. What does CI/CD stand for? CI/CD is a best practice for devops teams.

Continuous Delivery

Continuous Delivery Continuous Integration DevOps Agile

ANNOUNCEMENT — Stackery Expands Serverless Security and Continuous Delivery Capabilities

Stackery

APRIL 13, 2020

Today, Stackery is announcing enhanced security and continuous integration and delivery (CI/CD) capabilities that enable teams to automate delivery best practices from laptop to production. The Speed of Serverless with Enterprise Security and Governance. Automate Secure Serverless Delivery at Scale and with Speed

Continuous Delivery

Continuous Delivery Serverless Insurance AWS

Defining Cybersecurity – What You Need to Know to Stay Safe Online

The Crazy Programmer

OCTOBER 19, 2022

If you’re like most people, you probably think of “hacking” when you hear the word “cybersecurity.” ” And while hacking is certainly a form of cybersecurity, it’s just one aspect of this complex field. Defining Cybersecurity. Reasons Why Organizations Should Employ Cybersecurity.

Compliance

Compliance Wireless Continuous Delivery Internet

Webinars

Peak Performance: Continuous Testing & Evaluation of LLM-Based Applications

MORE WEBINARS

Continuous delivery in DevOps – A brief inside!

Openxcell

JANUARY 11, 2022

It has always been a point of concern that what is continuous delivery? Continuous delivery is a software development approach that accelerates the deployment of new code by automating the process. What is continuous delivery. What is continuous delivery in DevOps? Simplifying the flow of work.

Continuous Delivery

Continuous Delivery DevOps Weak Development Team Airlines

GitLab Adds More AI and Cybersecurity Capabilities to CI/CD Platform

DevOps.com

MAY 26, 2023

GitLab this week delivered an update to its continuous integration/continuous delivery (CI/CD) platform that adds additional generative artificial intelligence (AI) and cybersecurity capabilities.

Artificial Intelligence

Artificial Intelligence Artificial Inteligence Continuous Delivery Continuous Integration

Sharing Responsibility for Data Security in the Cloud

CIO

AUGUST 25, 2022

As organizations shape the contours of a secure edge-to-cloud strategy, it’s important to align with partners that prioritize both cybersecurity and risk management, with clear boundaries of shared responsibility. The security-shared-responsibility model provides a clear definition of the roles and responsibilities for security.”.

Cloud

Cloud Software Review Development Team Review Data

Standardizing Federal Cybersecurity With DevSecOps

DevOps.com

NOVEMBER 8, 2022

With President Biden’s Executive Order on Improving the Nation’s Cybersecurity and federal agencies’ issuance of DevSecOps best practices based on the Enduring Security Framework, government organizations are shoring up and standardizing their DevSecOps processes to meet today’s cybersecurity challenges head-on.

Government

Government Meeting Organization Development

Understanding the security shared responsibility model in an as-a-service world

CIO

MARCH 8, 2023

As organizations shape the contours of a secure edge-to-cloud strategy, it’s important to align with partners that prioritize both cybersecurity and risk management, with clear boundaries of shared responsibility. The security-shared-responsibility model provides a clear definition of the roles and responsibilities for security.”

Software Review

Software Review Development Team Review Systems Review Data Center

Always-on Development: Why Continuous Delivery Relies on Security by Design

DevOps.com

JANUARY 8, 2019

How continuous delivery can help organizations in their application security efforts The old model of developing secure applications followed a structured, siloed, step-by-step process—build, check, release.

Continuous Delivery

Continuous Delivery Development Applications Organization

Armory Joins Continuous Delivery Foundation As Premier Member

DevOps.com

APRIL 13, 2021

The post Armory Joins Continuous Delivery Foundation As Premier Member appeared first on DevOps.com.

Continuous Delivery

Continuous Delivery Open Source Enterprise Cloud

Spinnaker vs. Argo CD: Best Tools for Continuous Delivery

Dzone - DevOps

MARCH 13, 2023

Intro to CD Adopting containers has been a common strategy for enterprises to roll out new application changes quickly, deploy efficiently, and run applications securely. Today, to achieve those goals, many enterprises are now adopting continuous delivery (CD) in order to deploy changes into production quickly, frequently, and safely.

Continuous Delivery

Continuous Delivery Tools Enterprise Strategy

Cycode Leverages eBPF to Secure CI/CD Pipelines

DevOps.com

JUNE 12, 2023

Cycode today added a Cimon extension to its application security platform that uses extended Berkeley Packet Filtering (eBPF) to thwart cyberattacks against continuous integration/continuous delivery (CI/CD) pipelines.

Continuous Delivery

Continuous Delivery Continuous Integration Research Applications

Cybersecurity Fears May Drive Shift to Managed DevOps

DevOps.com

FEBRUARY 20, 2020

Should organizations consider using a managed service for DevOps to keep their platforms up to date and secure? The post Cybersecurity Fears May Drive Shift to Managed DevOps appeared first on DevOps.com.

DevOps

DevOps Open Source Continuous Delivery Continuous Integration

Cybersecurity Snapshot: CISA and NSA Dive into CI/CD Security, While MITRE Ranks Top Software Weaknesses

Tenable

JULY 14, 2023

1 – CISA and NSA issue CI/CD defense guidance Looking for recommendations and best practices to improve the security of your continuous integration / continuous delivery (CI/CD) pipelines? Dive into six things that are top of mind for the week ending July 14. Check out the joint guidance from the U.S. reads the report.

Weak Development Team

Weak Development Team Software Review Software Technical Review

Where to Start With Secure Design – Tips for Developers

DevOps.com

NOVEMBER 17, 2023

Designing secure software is an increasingly hot topic, and for good reason. In recent weeks, we’ve seen a global effort from governments and cybersecurity agencies to encourage security by design through new guidance and changes to procurement rules.

Development

Development Government Software Continuous Delivery

Prioritizing Product Security With DevSecOps

DevOps.com

DECEMBER 14, 2022

Building software with strong security can no longer be an afterthought for organizations. The need for a reliable cybersecurity posture has proven vital amid the constant attacks we’re seeing across industries, all over the world. The post Prioritizing Product Security With DevSecOps appeared first on DevOps.com.

Industry

Industry Software Organization Company

Palo Alto Networks Buys Cider Security to Lock Down Pipelines

DevOps.com

NOVEMBER 18, 2022

Palo Alto Networks this week extended its efforts to secure application environments by agreeing to acquire Cider Security, a provider of a platform for securing continuous integration/continuous delivery (CI/CD) platforms, for approximately $195 million in cash.

Network

Network Continuous Delivery Continuous Integration Cloud

Three key ways continuous delivery improves your security posture

DXC

NOVEMBER 12, 2019

Continuous delivery yields a host of IT and operational benefits, including proven competitive advantages like faster deployment times, responses to customer feedback, and bug fixes. But one aspect that tends not to make it on the marquee list of benefits — and should probably be headlining it — is security.

Continuous Delivery

Despite DevOps, Software Supply Chain Security Challenges Persist

DevOps.com

MAY 18, 2023

A survey of 397 IT, cybersecurity and application development professionals conducted by Enterprise Strategy Group (ESG) found that while most respondents work for organizations that have adopted DevOps practices, multiple software supply chain security issues and DevSecOps concerns have yet to be addressed.

DevOps

DevOps Software Survey Groups

8 Security Considerations for CI/CD

DevOps.com

JULY 7, 2021

In the software development enterprise, CI/CD refers to the combined practices of continuous integration and either continuous delivery or continuous deployment. How do you maintain quality and security with frequent deployments? […].

Continuous Delivery

Continuous Delivery Continuous Integration Software Development Testing

Red Hat Moves to Secure Software Supply Chains

DevOps.com

MAY 23, 2023

Red Hat today announced a portfolio of cloud services designed to better secure software supply chains. The expanded portfolio includes Red Hat Trusted Application Pipeline to secure continuous integration/continuous delivery (CI/CD) workflows and Red Hat Trusted Content offerings to better secure software components.

Software

Software Continuous Delivery Continuous Integration Cloud

Appdome Integrates Mobile Security Platform With CircleCI CI/CD

DevOps.com

FEBRUARY 8, 2023

Appdome this week made available an integration for the continuous integration/continuous delivery (CI/CD) platform from CircleCI that promises to make it simpler to secure mobile applications before they are deployed.

Mobile

Mobile Continuous Delivery Continuous Integration Applications

Cybersecurity Snapshot: Log4j Anniversary, CI/CD Risks, Infostealers, Email Attacks, OT Security

Tenable

DECEMBER 9, 2022

It was at around this time last year that the discovery of the zero-day Log4Shell vulnerability in the ubiquitous Log4j open source component sent shockwaves through the worlds of IT and cybersecurity. . 2 - OWASP’s top 10 CI/CD security risks. For more information: “ Implementing Phishing-resistent MFA ” (U.S.

Software Review

Software Review SMB Malware Development Team Review

Contrast Security Adds Free Code-Scanning Tool

DevOps.com

JUNE 3, 2022

Contrast Security this week made available a free security tool that enables developers to scan their code using the same core engine used by the cybersecurity team within their organization. The post Contrast Security Adds Free Code-Scanning Tool appeared first on DevOps.com.

Tools

Tools Engineering Marketing Organization

How to Securely Manage Secrets Within Jenkins

DevOps.com

JUNE 16, 2022

The continuous integration and continuous delivery (CI/CD) pipeline is a fundamental component of the software delivery process for DevOps teams. The pipeline leverages automation and continuous monitoring to enable seamless delivery of software.

How To

How To Continuous Delivery Continuous Integration DevOps

Securing Software with Intelligent Pipelines

DevOps.com

JANUARY 20, 2022

One of the biggest cybersecurity risks involves vulnerabilities in the application layer. The post Securing Software with Intelligent Pipelines appeared first on DevOps.com. After all, the best firewall is useless if the web application itself is vulnerable.

Software

Software Firewall Survey Programming

Survey Sees Little Progress on Securing Software Supply Chains

DevOps.com

APRIL 12, 2022

A survey of 1,750 IT security decision-makers published today found that, despite a series of high-profile cybersecurity breaches, nearly two-thirds (62%) of respondents have done nothing to secure their software supply chain. A full 64% conceded that an attack against their software development environment could not be stopped.

Survey

Survey Software Software Development Development

Embracing Security by Design in Development

DevOps.com

JANUARY 23, 2022

With cyberattacks on the rise and bad actors and ransomware gangs demanding millions in ransom, cybersecurity has taken on new urgency. The post Embracing Security by Design in Development appeared first on DevOps.com. In addition to more sophisticated hacking techniques, the rapid pace of tech adoption during […].

Development

Development Report Data Continuous Delivery

Supply Chain Security: Has the Next SolarWinds Already Happened?

DevOps.com

SEPTEMBER 2, 2022

More than two years after the now-infamous hack of the firm SolarWinds, the incident is very much in the foreground of conversations about cybersecurity defense, threat detection and incident response. The post Supply Chain Security: Has the Next SolarWinds Already Happened? Dozens […]. appeared first on DevOps.com.

Conference

Conference Continuous Delivery Testing Software

Most developers have adopted devops, survey says

InfoWorld

APRIL 16, 2024

As of the first quarter of 2024, 83% of developers were involved in devops -related activities such as performance monitoring, security testing, or CI/CD , according to the State of CI/CD Report 2024, published by the Continuous Delivery (CD) Foundation, a part of the Linux Foundation.

DevOps

DevOps Survey Development Continuous Delivery

How to make your web application more secure by using Interactive Application Security Testing (IAST) – PART 3 of Application Security Testing series

Xebia

JUNE 19, 2023

Introduction Welcome to part three of the blog series about Application Security Testing. In part one of this series, we looked at Static Application Security Testing (SAST) and in part two at Dynamic Application Security Testing (DAST). In this blog we are going to learn about Interactive Application Security Testing (IAST).

Applications

Applications Testing How To Tools

GitLab Makes Building Secure Mobile Apps Easier

DevOps.com

OCTOBER 29, 2020

GitLab has made 60 enhancements to its namesake continuous integration/continuous delivery (CI/CD) platform to address a range of things from DevSecOps processes to collaboration, at a time when most DevOps teams continue to work remotely. of GitLab adds an all-in-one tool […].

Mobile

Mobile Continuous Delivery Continuous Integration DevOps

To Prevent Supply Chain Attacks, Build Secure Code

DevOps.com

JULY 18, 2022

Moreover, the global software supply chain remains vulnerable to severe attacks, whether from a hostile nation-state like Russia–now increasingly in the cybersecurity spotlight due to fears of retaliation due to U.S. The post To Prevent Supply Chain Attacks, Build Secure Code appeared first on DevOps.com. sanctions–or from […].

Software Review

Software Review Software Company Continuous Delivery

JFrog Gives Pyrsia to CD Foundation to Secure Software Supply Chains

DevOps.com

OCTOBER 26, 2022

At the KubeCon + CloudNativeCon North America conference this week, JFrog announced it contributed the Pyrsia project, which uses blockchain technologies to secure software packages, to the Continuous Delivery (CD) Foundation.

Software

Software Blockchain Continuous Delivery Conference

Need Business Agility? Boost Your IT Capabilities!

Xebia

JANUARY 9, 2024

Steps that are carried out too late and where belated feedback result in a host of expensive and time-consuming adjustments (such as compliance and security measures). With the tools and techniques available to us today, we can redesign the steps and achieve tremendous acceleration in delivery.

Agile

Agile Continuous Delivery Testing System Architecture

DevOps World 2022: Using SBOMs to Secure the Software Supply Chain

DevOps.com

SEPTEMBER 9, 2022

As supply chain attacks become increasingly prevalent, visibility is emerging as a necessity in cybersecurity. One way to improve visibility and secure your software supply chain is with a software bill of materials (SBOM). The post DevOps World 2022: Using SBOMs to Secure the Software Supply Chain appeared first on DevOps.com.

DevOps

DevOps Software Open Source Continuous Delivery

GitLab Presses Case for DevSecOps Collaboration

DevOps.com

AUGUST 26, 2020

GitLab today at its GitLab Commit Virtual event pledged to make securing its open source continuous integration/continuous delivery (CI/CD) platform a more collaborative effort.

Open Source

Open Source Continuous Delivery Continuous Integration DevOps

Graylog Makes Free API Security Tool Available to Developers

DevOps.com

FEBRUARY 2, 2024

A free version of Graylog's API security platform is intended to encourage developers to adopt best practices to secure APIs.

Development

Development Tools Continuous Delivery Testing

New Relic Extends Observability Reach to More DevOps Platforms

DevOps.com

DECEMBER 15, 2022

New Relic today expanded its ecosystem by adding integrations between its observability platform and a wide variety of DevOps and cybersecurity tools. Peter […]. The post New Relic Extends Observability Reach to More DevOps Platforms appeared first on DevOps.com.

DevOps

DevOps Continuous Delivery Open Source Continuous Integration

Noname Security Looks to Shift API Security Testing Left

DevOps.com

JUNE 21, 2023

Noname Security today made generally available an update to a tool for testing application programming interface (API) security that promises to make it easier for DevOps teams to ensure APIs are secure.

Testing

Testing DevOps Programming Applications

Continuous Security

Mentormate

OCTOBER 4, 2021

Continuous integration (CI) and continuous delivery (CD) are together the most powerful hidden impact that Agile can have on a product development or engineering organization. However, investments in CI/CD can be leveraged to provide continuous security as well. Continuous Security Is an Investment in Freedom.

Software Review

Software Review Operating System Systems Review Testing

Synopsys Report Sees Steady Application Security Gains

DevOps.com

DECEMBER 5, 2023

An analysis of the security automation practices of 130 organizations published by Synopsys suggests significant progress toward securing software supply chains.

Report

Report Applications Analysis Software

Continuous Integration / Continuous Delivery on AWS

Mike Roberts

JANUARY 21, 2019

Continuous Integration and Continuous Delivery (CI/CD) are techniques that I’ve had a passion about for a long time. What are the AWS Continuous Integration / Continuous Delivery tools? no resource management; it has effectively infinite scaling; no worrying about security patching; etc.

Continuous Delivery

Continuous Delivery Continuous Integration AWS Weak Development Team

Continuous Integration / Continuous Delivery on AWS

Mike Roberts

JANUARY 21, 2019

Continuous Integration and Continuous Delivery (CI/CD) are techniques that I’ve had a passion about for a long time. What are the AWS Continuous Integration / Continuous Delivery tools? no resource management; it has effectively infinite scaling; no worrying about security patching; etc.

Continuous Delivery

Continuous Delivery Continuous Integration AWS Weak Development Team

What is CI/CD? Continuous integration and continuous delivery explained

ANNOUNCEMENT — Stackery Expands Serverless Security and Continuous Delivery Capabilities

Webinars

Trending Sources

Defining Cybersecurity – What You Need to Know to Stay Safe Online

Webinars

Continuous delivery in DevOps – A brief inside!

GitLab Adds More AI and Cybersecurity Capabilities to CI/CD Platform

Sharing Responsibility for Data Security in the Cloud

Standardizing Federal Cybersecurity With DevSecOps

Understanding the security shared responsibility model in an as-a-service world

Always-on Development: Why Continuous Delivery Relies on Security by Design

Armory Joins Continuous Delivery Foundation As Premier Member

Spinnaker vs. Argo CD: Best Tools for Continuous Delivery

Cycode Leverages eBPF to Secure CI/CD Pipelines

Cybersecurity Fears May Drive Shift to Managed DevOps

Cybersecurity Snapshot: CISA and NSA Dive into CI/CD Security, While MITRE Ranks Top Software Weaknesses

Where to Start With Secure Design – Tips for Developers

Prioritizing Product Security With DevSecOps

Palo Alto Networks Buys Cider Security to Lock Down Pipelines

Three key ways continuous delivery improves your security posture

Despite DevOps, Software Supply Chain Security Challenges Persist

8 Security Considerations for CI/CD

Red Hat Moves to Secure Software Supply Chains

Appdome Integrates Mobile Security Platform With CircleCI CI/CD

Cybersecurity Snapshot: Log4j Anniversary, CI/CD Risks, Infostealers, Email Attacks, OT Security

Contrast Security Adds Free Code-Scanning Tool

How to Securely Manage Secrets Within Jenkins

Securing Software with Intelligent Pipelines

Survey Sees Little Progress on Securing Software Supply Chains

Embracing Security by Design in Development

Supply Chain Security: Has the Next SolarWinds Already Happened?

Most developers have adopted devops, survey says

How to make your web application more secure by using Interactive Application Security Testing (IAST) – PART 3 of Application Security Testing series

GitLab Makes Building Secure Mobile Apps Easier

To Prevent Supply Chain Attacks, Build Secure Code

JFrog Gives Pyrsia to CD Foundation to Secure Software Supply Chains

Need Business Agility? Boost Your IT Capabilities!

DevOps World 2022: Using SBOMs to Secure the Software Supply Chain

GitLab Presses Case for DevSecOps Collaboration

Graylog Makes Free API Security Tool Available to Developers

New Relic Extends Observability Reach to More DevOps Platforms

Noname Security Looks to Shift API Security Testing Left

Continuous Security

Synopsys Report Sees Steady Application Security Gains

Continuous Integration / Continuous Delivery on AWS

Continuous Integration / Continuous Delivery on AWS

Stay Connected