open source - Tagged - DevOps.com Where the world meets DevOps Mon, 23 Dec 2024 13:47:36 +0000 en-US hourly 1 https://devops.com/wp-content/uploads/2021/10/android-chrome-256x256-1-130x130.png open source - Tagged - DevOps.com 32 32 144979424 Best of 2024: Valkey is Rapidly Overtaking Redis https://devops.com/valkey-is-rapidly-overtaking-redis-2/ Mon, 23 Dec 2024 13:47:10 +0000 https://devops.com/?p=174748 sign posts with many colored signssign posts with many colored signsRedis is taking it in the chops, as both maintainers and customers move to the Valkey Redis fork.]]> 174748 Perforce Forks Puppet, Community Considers Muppet https://devops.com/perforce-forks-puppet-community-considers-muppet/ Sat, 21 Dec 2024 14:53:26 +0000 https://devops.com/?p=174830 Perforce, PuppetPerforce, PuppetDevOps platform company Perforce is forking Puppet, the open-source configuration management technology it acquired in May 2022.]]> 174830 Report Shines Spotlight on Open Source Software Security Challenges https://devops.com/report-shines-spotlight-on-open-source-software-security-challenges/ Tue, 10 Dec 2024 06:50:16 +0000 https://devops.com/?p=174477 software, security, open-source, Lineaje, Linux, open source, report, study, Open source codesoftware, security, open-source, Lineaje, Linux, open source, report, study, Open source codeAn analysis of more than five million open-source software packages published by Lineaje, a provider of a platform for tracking open-source software components, finds 95% of security issues involve some type of open-source software package dependency, with more than half (51%) of the vulnerabilities discovered having no known existing fix available.]]> 174477 Code Busters: Are Ghost Engineers Haunting DevOps Productivity? https://devops.com/code-busters-are-ghost-engineers-haunting-devops-productivity/ Fri, 06 Dec 2024 07:40:06 +0000 https://devops.com/?p=174408 ghost, engineers,ghost, engineers,A study coming out of Stanford University conducted by software engineering productivity specialist Yegor Denisov-Blanch claims that developer teams are rife with so-called ghost engineers who do virtually no work.]]> 174408 Sonatype Report Surfaces Software Supply Chain Security Challenges https://devops.com/sonatype-report-surfaces-software-supply-chain-security-challenges/ Thu, 10 Oct 2024 15:12:20 +0000 https://devops.com/?p=173479 DevSecOps, appsec, ai, open-source, Sonatype, AppSec , devsecops, Traceable supply chainDevSecOps, appsec, ai, open-source, Sonatype, AppSec , devsecops, Traceable supply chainSonatype today during a virtual All-Day DevOps (ADD) event shared the results of a report that finds there has been a 156% increase in the number of malicious open source packages year-over-year, reaching more than 512,847 for a 156% increase in the past year.]]> 173479 Survey Finds Compensation Drives Better Open Source Software Security Behavior https://devops.com/survey-finds-compensation-drives-better-open-source-software-security-behavior/ Fri, 27 Sep 2024 05:01:30 +0000 https://devops.com/?p=173181 open-source, pay, maintainersopen-source, pay, maintainersA survey of 400 maintainers of open-source software projects suggests IT organizations should be paying a lot more attention to the degree to which the stewards of these projects are compensated before downloading software components.]]> 173181 GitHub Steers Copilot Autofix Into Eye of AI Security Storm https://devops.com/github-steers-copilot-autofix-into-eye-of-ai-security-storm/ Tue, 20 Aug 2024 08:36:35 +0000 https://devops.com/?p=172465 autofix, softwareautofix, softwareGitHub has come forward with its new Copilot Autofix tool. This AI-driven software service is targeted at developers who need to address software vulnerabilities in code destined for traditional applications and inside those infused with an injection of new or existing breeds of AI. ]]> 172465 Endor Labs Adds Analytics and Patching Tools to Secure Open Source Software https://devops.com/endor-labs-adds-analytics-and-patching-tools-to-secure-open-source-software/ Wed, 07 Aug 2024 13:00:59 +0000 https://devops.com/?p=172225 endor, patching tools, Open source codeendor, patching tools, Open source codeEndor Labs today at the Black Hat USA 2024 conference revealed it has added an ability to determine how challenging it might prove to be to upgrade an open source software package, including its potential to break an application, to its platform for securing software supply chains.]]> 172225 Survey Finds Speed of Software Deployment Outpacing Security https://devops.com/survey-finds-speed-of-software-deployment-outpacing-security/ Thu, 01 Aug 2024 16:48:21 +0000 https://devops.com/?p=172082 development, Node.js ZAP SBOMdevelopment, Node.js ZAP SBOMA survey of 5,315 individual contributors and leaders in development, IT operations and security finds two-thirds (66%) are releasing software faster than they were a year ago.]]> 172082 The Future of Observability: How OpenTelemetry is Shaping IT Operations in the Age of AI https://devops.com/the-future-of-observability-how-opentelemetry-is-shaping-it-operations-in-the-age-of-ai/ Thu, 11 Jul 2024 13:03:13 +0000 https://devops.com/?p=171563 OpenTelemetry, CNCF, eBPF, OTel, opensource, opentelemetry, mobile, observability, AI, New Relic Mezmo AI Cisco Datadog SPIRE observability OpenTelemetryLFN open sourceOpenTelemetry, CNCF, eBPF, OTel, opensource, opentelemetry, mobile, observability, AI, New Relic Mezmo AI Cisco Datadog SPIRE observability OpenTelemetryLFN open sourceOpenTelemetry (OTel) is going to do for IT operations what open-source software originally did for application development.]]> 171563