Bridgecrew: Misconfigured Terraform Modules Are a Security Issue
44% of the 2,600 modules for Amazon Web Services, Azure and Google Cloud support were misconfigured when Bridgecrew assessed how they match up again CIS benchmarks.
Digital Transformation During the Pandemic
IT operations and capital expenses are being cut. As of May 2020, 30% of organizations expect budgets for IT operations to decrease as a result of the pandemic, with only 13% predicting increases according to a report from Avasant Research.
Rancher’s K3s Will Be Crucial for SUSE’s Kubernetes Success
Rancher’s K3s Kubernetes distribution offers SUSE rapid growth and a distinctly new set of users attracted to the ease in which it can be deployed with IoT and edge use cases.
Serverless Needs More Observability Tools
Top serverless use cases continue to involve REST APIs and business logic.
Where Site Reliability Engineering Overlaps with DevOps
Infrastructure-as-code is used by 71% of site reliability engineers.
Few Testers Have Programming Skills
The average developer says that fewer than half of the testers they work with have no programming skills.
Focus on Speed Doesn’t Mean Focus on Automation
When forced to choose, quality wins out over speed 7 out of 10 times according to a survey of over 600 IT professionals conducted by OverOps, a vendor that helps identify and remediate software issues.
Developer Dissatisfaction Doubles
Developer job dissatisfaction more than doubled, with 24% being at least slightly dissatisfied, up from 11% when the same question was asked a year ago.
Unmaintained Dependencies and Other Ways to Measure CI/CD Security
I look at five recent studies, with a focus on CI/CD and open source. As always, the analysis goes beyond the press release-based reporting you may have read elsewhere.
Non-Contributing Developers Expect Companies to Support Open Source
Companies should encourage its developers to spend part of the workday contributing to open source whether or not a project is managed internally by the company itself.
Integrating Security into the Development Pipeline
DevOps teams are more likely to have security tools properly integrated in their development pipeline, but many still struggle to do it well.
Long-Running Study Finds Uptake of Private Clouds from Azure, AWS and GCP
By one measure, it seems obvious that the migration of workloads to the public cloud has accelerated. In last year’s study, only 33% of workloads were in the public cloud, while today the figure is 57%.