GitLab security scanning – part 3: Kubernetes deployments 05/16/22 by Sven Hertzberg In part 1 and part 2, we focused on different types of security scanning practices. In this article we will... Read more Leave your thoughts
Keycloak.X, but secure – without vulnerable libraries 05/10/22 by Sebastian Rose and Thomas Darimont TLDR: How to reduce the known CVEs (common vulnerabilities and exposures) to zero by creating your own Keycloak distribution*. Introduction... Read more Leave your thoughts
GitLab security scanning – part 2 04/19/22 by Sven Hertzberg … Containers … applications … licenses … In part 1 of the article series, we focused on static scanning of... Read more Leave your thoughts
GitLab security scanning 03/14/22 by Sven Hertzberg Secure.Your.Code! …At all stages…Automatically…Always…Starting with the first line of your code… Today, the security scanning of code, containers and applications... Read more Leave your thoughts
Jira templates for user stories, tasks and bugs 01/12/22 by David Lojewski A recurring task in product management is writing user stories. In agile product development, a user story describes requirements for... Read more Leave your thoughts
Overview of hardened container base images 08/10/21 by Christian Zunker How to choose the best container base image? What does “best” mean in this context? This blog post will not... Read more Leave your thoughts
Failure on demand – Scenes from an agile transformation 07/15/21 by Stefan Herrmann In this blog post, we want to show why agile transformations fail, illustrating various situations that unfortunately still occur far... Read more Leave your thoughts
How mature is your DevOps? – Some thoughts on measuring progress 06/07/21 by Nicolas Byl How do you measure your progress towards DevSecOps? Is there some sort of maturity model or a required skill set for everyone involved? Read more Leave your thoughts
Organising a remote workshop EventStorming 04/22/21 by Bart van Wezel In a workshop, EventStorming the interaction between participants is important. Remote this can be harder to achieve. We discuss how we tackled the challenges, and how the workshop was perceived. Read more Leave your thoughts