Collaborate Disseminate
Recently, I moderated round table discussions between dozens of CISOs at Evanta CISO Summits in Chicago and Atlanta, and my colleague, Michelle Dufty, moderated a similar event in San Francisco.
The post What I Learned Talking to 45 CISOs About De… Continue reading What I Learned Talking to 45 CISOs About DevSecOps
What is DevSecOps? It involves taking all the practices of DevOps and pulling in security practices to improve security. Tom Stiehm (@thomasstiehm) explains the process.
The post Shifting Security Left: The Innovation of DevSecOps appeared first o… Continue reading Shifting Security Left: The Innovation of DevSecOps
Jez Humble’s (@jezhumble) career has spanned roles through coding, infrastructure, and product development across three continents and organizations of varying sizes. To say he knows a lot about continuous delivery is a total understatement…. Continue reading Continuous Delivery For All
In case you missed it — our rival JFrog published this blog post on Thursday. Amidst the hyperbole, JFrog made a few statements that are true, and numerous that are rooted in fear mongering, falsehoods and gimmicky marketing tactics. … Continue reading Sonatype Nexus is Rising Above the Swamp
When molten steel is immersed in water it transforms into one of the world’s strongest materials. A resilient software supply chain is no different. Hardened steel requires combining alloys; a hardened software supply chain requires combinin… Continue reading Gartner: Mitigate Risk By Hardening the Software Supply Chain
Sonatype is working on improving the overall experience when dealing with microservices, containers, and serverless development such as AWS Lambdas or Azure Functions. We would love to understand your needs. If you are excited about microservices,… Continue reading Take Our Survey: Microservices, Containers, and Serverless Development
I learned about Buckminster Fuller when I was frantically drawing my way through an architecture degree in college. Fuller was quite an inspirational architect and the inventor of the Geodesic dome.
He had this saying that stuck in my head: “A foo… Continue reading Are You a Fool with a Tool?
The Sonatype journey started more than a decade ago, just as the concept of “open source” and componentized software development was gaining steam. From our humble beginning as core contributors to Apache Maven, to supporting Maven Cen… Continue reading Vista Acquires a Majority Interest in Sonatype: A Great Day for our Customers, Partners and Community
Four years ago, my colleague Mark Miller and I founded the All Day DevOps conference with seven friends from around the community. We planned the conference in 90 days and expected 1,000 folks to show up to listen to the 57 speakers we had v… Continue reading Sonatype Partners with All Day DevOps to Deliver the Largest DevOps Conference for 36,000
Editor’s Note: You can meet Gene at the 2020 DevOps Enterprise Summit (DOES) October 28-30 in Las Vegas. Visit the Sonatype booth to receive a free copy of The Unicorn Project. DOES explores everything related to open source security, at scale. So… Continue reading How The Unicorn Project Aligns with The Phoenix Project