“Liquid Software” release practices are rapidly becoming the standard in many companies. However, as software shapes digital transformation, DevOps teams are feeling challenged to manage their growing influence on corporations’ success or failure. In a talk I gave last week, we looked into the growing pains that most enterprises (many of them JFrog customers) face when adopting and consolidating DevOps at scale, and how these challenges are being mitigated with end-to-end platform solutions. We also wrap up with some DevOps best practices that will help you address emerging trends that your bosses’ bosses care about.
Category Archives: cloud
How To Build An Integration With JFrog Xray?
The trend of DevSecOps is not new but it’s growing fast. More and more organizations wish to integrate their security team in all the phases of development and operation.
Many security products keep your code safe from vulnerabilities at different stages (dev, test, qa and prod). However, JFrog Xray is unique in its capabilities to perform analysis of all the binaries you are consuming in your project.
JFrog Xray works with JFrog Artifactory to perform a deep analysis of binary components at any stage of the application lifecycle. It provides full transparency that leads to (more) trust in your software. By scanning binary components and their metadata, recursively going through dependencies at any level (think on the layers you have in any Docker container), JFrog Xray provides great visibility into issues lurking in components anywhere in your organization.
One of the best parts is that JFrog Xray is also fully automated through a rich REST API that lets it integrate with a CI/CD pipeline and allows other binary analysis tools to build on its unique capabilities.
Continue readingWhat is the JFrog Container Registry? And Why Will You Want One?
These days, where many developers are working with containers and all their ‘outcomes’ are bundled in a Docker container, it is becoming challenging to manage and control them.
Moreover, as more containers and Kubernetes enter the party, the job gets that much harder. Now, you have a tool that can help you jump to the next level. The JFrog Container Registry is a new Docker, Helm, and generic registry that is scalable and reliable.
What’s even better?
It’s free… and gives you some unique features you can’t find anywhere else.
Give it a try at: jfrog.com/container-registry and/or continue to read below.
Continue readingJFrog Artifactory REST API in 5min
Most of the interactions with Artifactory will be from your CI/CD tools. It might be your build engine or from your log aggregator. This powerful API can be invoked in any of the standard ways you like to work with any other RESTful APIs (e.g. curl, CLI, your source code, etc’).
In many cases, it’s the preferred ‘glue’ for developers when it comes to automation. The options are extensive and you can do many useful things with this API. However, in this short post, we will cover the most popular actions you ‘must have’.
Let’s start with the most common action: “upload/download binaries“. This action could run automatically from the build machine to Artifactory using:
Continue readingVP Of Technology At JFrog
At last SwampUP, I had the opportunity to talk with Alan Shimel, Founder and Editor at DevOps.com. We covered what I do at JFrog and spoke about the definition of the role “VP of Technology”. We also covered some interesting new products we offering these days to help developers move faster.
I told Alan that I define the role as “finding leverage points in (JFrog) technology to support the business”.
Continue readingMarket Trends Talk – swampUp 2019
The world has many buzzwords that people like to use. Some are more relevant to the real world and some aren’t. If yesterday was powered by new products and features, today is going to be filled by insights from our communities.
There are around 37 million developers in the world (according to GitHub last report) so it’s a substantial community. Moreover, DevOps is growing at a rapid pace. Btw, according to StackOverflow last survey – DevOps developers and site reliability engineers are among the highest paid, most experienced developers most satisfied with their jobs, and are looking for new jobs at the lowest levels.
I think we can all agree that data is stronger than opinions, rights?
This is what I really like about the special point of view that we have at JFrog. As the “database of DevOps“, we are sitting in a unique place – holding the output of what developers producing.
This is giving us excellent visibility into trends and the real world.
What does this mean?
It’s about contrasting perception with reality.
We combined our own data from 5000 customers with internal and external researches in an effort to give you a clear picture of the current state and what are the DevOps trends for the next 12-18 months.
The main challenges
JFrog & Shippable – The Synergy
In the video below we talk about JFrog –Shippable acquisition and did our best to answer some of the questions, we got over the last couple of weeks.
What is Shippable?
Shippable provides software organizations with the ability to optimize and accelerate the process of shipping software by giving them an “Assembly Lines” platform that borrows concepts from the world of manufacturing and helps them easily achieve Continuous Delivery. Cutting-edge modern companies like Facebook, Amazon, Google, and Netflix have already built homegrown versions of Assembly Lines after spending years of effort and millions of dollars. You can ship applications as rapidly as these companies by leveraging Shippable.
JFrog
JFrog’s solution is a fully automated pipeline for distributing trusted software releases. It connects all developers and DevOps engineers to end devices and ensures software flows quickly and free from interruption. There are many good (starting) points of integration and it can be customized to the current needs of your company. For more about the enterprise platform read here: https://jfrog.com/enterprise-plus-platform/
So Where is the synergy?
Continue readingYour First Kubernetes Cluster On Mac
If you wish to learn about Kubernetes, the first thing is to try it for yourself. Since many developers are using Mac, let’s see how to run it. This post is sort of a ‘checklist’ I wrote when I was first ‘playing’ with K8b… If you want more details please check the official site.
Continue readingRun Everything In Docker Containers (On Your Mac)
If you wish to see the power of docker on your Mac as a way to run all (or many) of your daily apps check this great post by Jess.
However, when you are going to the repo with all the Dockerfiles it’s clear that it was meant to be used on Linux. However, here is a short path to run all of these powerful apps on Mac as well.
Continue readingProduct Excellence Best Practices
What are the components that help teams to build quality into their outcomes?
The main goal is to create a baseline that developers could follow and be in a quality level that is well defined and measurable. The main parts to focus on are:
- Testing
- Code reviews
- Static analysis
- Health monitoring: availability, resilience, etc’.
Ido Green 