46 captures
06 Aug 2022 - 09 Oct 2026
Nov
DEC
Jan
16
2021
2022
2023
success
fail
About this capture
TIMESTAMPS
The Wayback Machine - http://web.archive.org/web/20221216225550/https://devops.com/devops-onramp/
DevOps Onramp - DevOps.com
DevOps.com
Latest
Articles
Features
Most Read
News
News Releases
Topics
AI
Continuous Delivery
Continuous Testing
Cloud
Culture
DataOps
DevSecOps
Enterprise DevOps
Leadership Suite
DevOps Practice
ROELBOB
DevOps Toolbox
IT as Code
Videos/Podcasts
Techstrong.tv Podcast
Techstrong.tv Video Podcast
Techstrong.tv - Twitch
DevOps Unbound
Webinars
Upcoming
On-Demand Webinars
Library
Events
Upcoming Events
On-Demand Events
Sponsored Communities
CloudBees
IT as Code
Rocket on DevOps.com
Traceable on DevOps.com
Quali on DevOps.com
Related Sites
Techstrong Group
Container Journal
Security Boulevard
Techstrong Research
DevOps Chat
DevOps Dozen
DevOps TV
Techstrong TV
Techstrong.tv Podcast
Techstrong.tv Video Podcast
Techstrong.tv - Twitch
Media Kit
About
Sponsor
AI
Cloud
Continuous Delivery
Continuous Testing
DataOps
DevSecOps
DevOps Onramp
Practices
Low-Code/No-Code
IT as Code
More
Application Performance Management/Monitoring
Culture
Enterprise DevOps
ROELBOB
DevOps OnRamp
Latest
Shift Left Testing in Microservices Environments
December 13, 2022 | Anirudh Ramanathan
5 Tips to Consider When Introducing Infrastructure Automation
December 12, 2022 | Bill Doerrfeld
Migration to AWS Cloud: Do’s and Don’ts
December 9, 2022 | Pavel Khrulev
Looking to the Future of Developer Experience
December 7, 2022 | Bill Doerrfeld
AWS re:Invent — Top 4 Things We Learned This Week
December 1, 2022 | Richi Jennings
DevOps 101
Developer’s Guide to Fuzz Testing
November 8, 2022 | Sergej Dechand
CNCF Survey Predicts Growing Wasm Momentum
October 28, 2022 | Mike Vizard
DevOps Principles, Implementations and Culture
October 17, 2022 | Stefan Thorpe
Microservices Explained: Not Your Father’s SOA
October 11, 2022 | Mitch Ashley
DevOps Best Practices
Shift Left Testing in Microservices Environments
December 13, 2022 | Anirudh Ramanathan
5 Tips to Consider When Introducing Infrastructure Automation
December 12, 2022 | Bill Doerrfeld
Looking to the Future of Developer Experience
December 7, 2022 | Bill Doerrfeld
Choosing the Right API Solution
October 14, 2022 | Massimo Scardellato
DevSecOps
5 Tips for Securing DevOps: What You Wish You Knew Sooner
November 16, 2022 | Ross Moore
Rust Momentum Intensifies | Elon Says No WFH
November 10, 2022 | Richi Jennings
Developer’s Guide to Fuzz Testing
November 8, 2022 | Sergej Dechand
How DevOps Helps With Secure Deployments
November 4, 2022 | Mariusz Michalowski
Observability
Time-Series Database Basics
August 18, 2022 | Jeff Tao
Deciphering the Observability Market
July 21, 2022 | Nick Heudecker
5 Mean-Time Reliability Metrics To Follow
July 7, 2022 | Bill Doerrfeld
Opportunities and Challenges of Observability
May 27, 2022 | Nathan Eddy
Cloud Computing
Migration to AWS Cloud: Do’s and Don’ts
December 9, 2022 | Pavel Khrulev
AWS re:Invent — Top 4 Things We Learned This Week
December 1, 2022 | Richi Jennings
CNCF Survey Predicts Growing Wasm Momentum
October 28, 2022 | Mike Vizard
Introduction to Cloud Custodian
October 24, 2022 | Bill Doerrfeld
DevOps Open Source
Majority of Open Source Devs Open to Change Jobs in 2022
July 29, 2022 | Bill Doerrfeld
Log4j: Is There Such a Thing as ‘Too Much’ Open Source?
December 15, 2021 | Mitch Ashley
Is Open Source More Secure Than Closed Source?
April 14, 2021 | Joram Wilander
The Benefits of Open Source Technologies
February 9, 2021 | Odysseas Lamtzidis
Software Supply Chain Security Pulsemeter
Step
1
of
6
16%
Are you worried about software supply chain attacks?
Very worried
Somewhat worried
A little worried
Not very worried
Not at all worried
Which of these do you include as part of your software supply chain security analysis today?
1st party code; 3rd party open-source dependencies; containers; pipeline tools
3rd party open-source dependencies, and containers only
3rd party open-source dependencies only
We aren't focusing on software supply chain security today
Do you currently produce software bill of materials (SBOMs) for your applications?
All of my applications
Most of my applications (70 - 90%)
Some of my applications (40 - 70%)
A few of my applications (10 - 40%)
None of my applications
Of those SBOMs produced, how many are published?
All of my SBOMs are published
Most of my SBOMs are published (70 - 90%)
Some of my SBOMs are published (40 - 70%)
A few of my SBOMs are published (10 - 40%)
None of my SBOMs are published
What are the main drivers for using SBOM? (select all that apply)
Improving vulnerability response
Mandate from senior management
Regulatory requirement
Third-party/Partner risk management reporting
I heard about it and it seems cool
What are the key factors considered in your selection of open-source packages? (select all that apply)
Functionality
Widespread use/Popularity
Security/Risk
Project Maturity
Community development, fixes and support
How do you secure the open-source software used in your applications? (select all that apply)
Only authorized packages are allowed to be used
Require signed components in CI process
Software Composition Analysis
Monitor vulnerability reports
Software inventory tracking (SBOM)
Δ
