Detect and alert common vulnerabilities and exposures (CVE) in 3rd-party dependencies

Using 3rd-party libraries makes developer’s lives so much easier but can turn them into a nightmare when they are unmanaged and we don’t have a good understanding what is being used in a project or even a larger organization. Continue reading

Continuous delivery infrastructure as code

This is part 1 of a series of posts covering Docker in a Continuous Delivery environment. Today I’m showing how simple it is to setup a continuous delivery build pipeline infrastructure using Docker. In an upcoming post we will look at Jenkins pipeline as code creating Docker images and running integration tests against Docker containers. Continue reading