Detect and alert common vulnerabilities and exposures (CVE) in 3rd-party dependencies

Wed, 03 Aug 2022 00:00:00 +0000

Using 3rd-party libraries makes developer’s lives so much easier but can turn them into a nightmare when they are unmanaged and we don’t have a good understanding what is being used in a project or even a larger organization.

A few months ago we have seen quite a few popular frameworks widely used in many software products being hit by severe CVE (common vulnerabilities and exposures).

Continuous delivery infrastructure as code

Wed, 10 May 2017 00:00:00 +0000

This is part 1 of a series of posts covering Docker in a Continuous Delivery environment.

Today I’m showing how simple it is to setup a continuous delivery build pipeline infrastructure using Docker. In an upcoming post we will look at Jenkins pipeline as code creating Docker images and running integration tests against Docker containers. The series will close with an article explaining how we can move all containers built throughout this series of posts in a Docker swarm environment.

Continuous Delivery on Martin Ahrer

Detect and alert common vulnerabilities and exposures (CVE) in 3rd-party dependencies

Continuous delivery infrastructure as code