Another quarter done. Another Selenified release in the books. We didn’t add too many new features this release, mainly focusing on usability and tightening up existing functionality. But beware, we bumped the minor version because this release isn’t backward compatible. Properties File Instead of needing to provide all properties directly from the command line (or […]
I recently had the opportunity to do a web seminar with Jeff Payne about using open source tools for DevSecOps. In our discussion, I made the point that the goal of DevSecOps is to make application security a first-class citizen in the DevOps process. Making application security a first-class citizen improves the quality of your […]
On my current project, my team is using FreeIPA to implement Single Sign-On (SSO) for all the employees at Coveros. FreeIPA is an open-source security solution for the Linux operating system which provides account management and centralized authentication, similar to Microsoft’s Active Directory. It is built on top of multiple open source projects such as […]
For a variety of reasons, a lot of companies are moving to an Agile, DevOps Culture, Continuous Integration and Delivery/Deployment (CI/CD) model. These transformations rely on a variety of tools, including open source. A lot of organizations also use open source tools and libraries to develop their applications and in order to ensure security, these […]
This is a two part post where I will show you how to setup development environment locally. We will start with Vagrant and Virtual Box and their initial setup. Then we will jump into multi-machine setup and provisioning using Puppet. You will also see how Database and WebApp VMs can work together. Vagrant and Virtual […]
Any developer who has ever opened up a pom file on a large project will be familiar with the seemingly infinite number of dependences which make governance nearly impossible. Thankfully, Sonatype is making our job a little bit easier with Nexus Firewall–a tool which allows system administrators the ability to craft policies to limit which […]
Coveros CTO Tom Stiehm is presenting a conference session on Implementing Cloud-Based DevOps for distributed Agile projects at ADCWest / BSCWest in Las Vegas June 5, 2013 Cloud-based development, delivery, and deployment environments are the future of IT operations. Thomas Stiehm shares the hard-learned lessons of setting up and running cloud-based solutions that implement DevOps […]
Tom Stiehm, Coveros CTO, is presenting Integrating Security into Continuous Delivery at DC Continuous Integration, Delivery and Deployment Group Wednesday, March 13, 2013 at Blackboard Inc. (650 Massachusetts Avenue Northwest, Washington, DC (map)) starting at 6:30PM. The Internet is full of insecure applications that cost organizations money and time, while damaging their reputations when their […]
Coveros CEO, Jeffery Payne will speak on securing open source software at Open Source Industry Day. The event will feature speakers from the NSA as well as industry and open source development community experts. The day-long, unclassified event is open to the public. For more information visit: OSSI
