DevOps Metrics: Measuring What Matters

Sooner rather than later, all software development teams have to implement strong DevOps. As the product scales, the development process should get more efficient, with shorter cycles of putting high-quality software in the end user’s hands…. Continue reading DevOps Metrics: Measuring What Matters

How to Use Nancy to Improve Your Go Application Security

I believe in writing high-quality Go code, and I bet you do, too. I also know I’m not a genius and can’t write high quality code all of the time. Fortunately, a number of Go tools help me write high quality code, with less time and eff… Continue reading How to Use Nancy to Improve Your Go Application Security

Sonatype Nexus Repository 3.20 Installation, Admin Login, and Port Change [VIDEO]

There are often times in agile teams where DevOps is constrained by bandwidth. 
This tutorial is aimed at developers to help them get things up and running without hassle. This will give them confidence to try out things on a working instance… Continue reading Sonatype Nexus Repository 3.20 Installation, Admin Login, and Port Change [VIDEO]

How to Access npm Packages After Securing Nexus Repository Manager

This article addresses those who are using, or having interest in using, Nexus Repository Manager as their package manager for npm packages, Docker images, etc., but also for those who are curious about Nexus security.
The post How to Access npm P… Continue reading How to Access npm Packages After Securing Nexus Repository Manager

Kill the Restructure, Says Dr. Cherry Vu and Rob England [VIDEO]

Editor’s Note: The chapter, “Kill the Restructure” is included in Epic Failures in DevSecOps, Volume 2, which is available for free download.

We see too many enterprises assuming one of the first steps of DevOps is a reorganization. DevOps isn&… Continue reading Kill the Restructure, Says Dr. Cherry Vu and Rob England [VIDEO]

For Distributed Teams, It’s Not All About the Tools

Sonatype is a distributed workforce. Most of us work remotely, and we are hiring. But before you apply, do you know what it means to work on such a team?
The post For Distributed Teams, It’s Not All About the Tools appeared first on Security Boule… Continue reading For Distributed Teams, It’s Not All About the Tools

How to Publish Java Artifacts to Nexus Using Jenkins and Maven

In this article we are going to explore how you can publish your Java artifacts (.ear, .jar, .war) to Nexus 3 using Jenkins and Maven.
For this I have created a docker compose file which comes with Nexus and Jenkins. Let’s take into considerations… Continue reading How to Publish Java Artifacts to Nexus Using Jenkins and Maven