The Evolving Role of the Developer in 2021

Dec 14, 2020Download as PPTX, PDF1 like159 views

The role of the developer continues to change as they sit on the front line of application and even cloud infrastructure security. Today, developers are focused on innovating fast and improving security, but how do high-performing teams accomplish this? They commit code frequently, release often and update dependencies regularly (608x faster than others). In this webinar, we'll discuss the key traits of high-performing teams and how that impacts the role of the developer. Key Takeaways: Choose the best third party dependencies Determine the lowest effort upgrades between open source versions Solve for issues in both direct and transitive dependencies with a single-click Block and quarantine suspicious open source components

The Evolving Role of the Developer in 2021

REM AI N
COMPETI TI VE
CRE ATE
NEW MARKE TS
I NCRE ASE
REVENUE

Source: 2020 State of the Software Supply Chain Report, Sonatype

Source: 2020 DevSecOps Survey and 2020 State of the Software Supply Chain Report, Sonatype

Out of The Crisis
●Reduce Developer time spent
researching, securing approval of,
and downloading quality open
source components
●Reduce Developer time spent on
remediation and rework due to
improved code quality early in the
SDLC
Reduced developer time
spent on OSS procurement
process by 80%
Reduced time spent on
remediation/rework on
legacy applications by 40-
50%
Reduced developer and QA time
by 4-8 hours per identified OSS
issue (late in SDLC)
Use some process to add a
new dependency (e.g.,
evaluate, approve,
standardize, etc.)
Strive to use the latest
version (or latest-N) of all
dependencies.
Schedule update dependencies
as part of daily work.

Make better decisions
about components
being used in the
applications.

We know that most organizations today are integrating at least some test automation into their CI/CD pipelines. Most start with unit testing – which, while a great place to start, can't give you the level of confidence you need to safely deploy into production. In this webinar, we'll talk about what other types of testing you should be integrating into the CI/CD pipeline to make test automation more valuable – as well as how to develop an integrated approach using Agile test management. We'll also share best practices for avoiding some of the most common anti-patterns we've identified that make it difficult to scale beyond the unit level. You will learn: How to get more value out of test automation and minimize the number of defects identified late in the delivery cycle How to avoid common anti-patterns related to collaboration, test data management, testing in the cloud and more Best practices for scaling and managing test automation across a diverse toolset using Agile test management

2021 Open Source Governance: Top Ten Trends and PredictionsDevOps.com

If you work in software development, jumpstart your engineering team in 2021—get ahead of the engineering curve and your competitors—by attending this must-watch open source trends and predictions webinar. Alex Rybak, Director of Product Management at Revenera, and Russ Eling, founder and CEO of OSS Engineering Consultants, share their top 10 open source usage, license compliance and security insights for the new year. Just a few hints at what you’ll learn more about: Where the adoption of shift-left is headed and the decisions you’ll face going forward The impact of a lack of software developer security training relative to pandemic fallout The broader role of the engineering team in open source management and governance The expanding role and impact of open source marketplaces such as GitHub Don’t miss the discussion for valuable insight and learning for software engineering teams

Optimize your CI/CD with GitLab and AWSDevOps.com

The document discusses best practices for accelerating the transformation to mature software manufacturing using DevOps principles. It recommends adopting modern approaches like microservices, serverless architectures, infrastructure as code, and event-driven architectures to increase speed and agility. Automating testing and deployments through continuous integration/delivery (CI/CD) pipelines is key. The document advocates treating infrastructure like code and using tools like AWS CodePipeline and GitLab to enable self-service platforms and faster delivery through automation.

Modernising One Legal Se@rch with Elastic Enterprise Search [Customer Story]Elasticsearch

Measure Customer Value with Self-Service ObservabilityDevOps.com

Today’s digital economy and customer experience demands flawless service availability and reliability whilst delivering customer value at ever increasing pace. This rate and scale of change requires automation to assist teams as they continuously evolve digital products and services. Any compromised reliability or availability along the way means fundamentally taking two steps backwards in terms of customer experience and value delivery, instead of one step forward. To keep up constant development momentum as they scale services and experience, teams are turning to self-service observability for better insights and context that grow with their services, and allow development teams to focus their time on delivering the value that customers want. What you’ll learn: What does a truly self-service observability solution mean to you How customer value and experience insights are derived from your data How you can transform your data to enrich your data for more context How applying AI to your data continues to automate, automate, automate What AI techniques can benefit you and your processes

Shift Left Security - The What, Why and HowDevOps.com

This document discusses shift-left security, which involves moving security practices earlier into the software development lifecycle to proactively address risks rather than reactively. It notes that only 20% of organizations consistently integrate security early in DevOps processes. Shift-left security is important because traditional security teams cannot keep up with development speeds. The document outlines how to implement shift-left security through automating security practices, using control gates, and learning from production environments. It argues containers help shift security left through their minimal, declarative, and predictable nature which simplifies security requirements and policy automation.

DevOps in the Real World: Know What it Takes to Make it WorkVMware Tanzu

How to plug the data gap in DevOpsDeborah Schalm

As companies have adopted faster development methodologies a new constraint has emerged in the journey to digital transformation: data. Data has long been the neglected discipline, the weakest link in the tool chain, with provisioning times still counted in days, weeks, or even months. In addition, most companies are still using decades-old processes to manage and deploy database changes, further anchoring development teams.

Infrastructure as Code in Large Scale OrganizationsXebiaLabs

The adoption of tools for the provisioning and automatic configuration of "Infrastructure as Code" (eg Terraform, Cloudformation or Ansible) reduces cost, time, errors, violations and risks when provisioning and configuring the necessary infrastructure so that our software can run . However, those who have begun to make intensive use of this technology at the business level agree to identify the emergence of a very critical problem regarding the orchestration and governance needs of supply requests such as security, compliance, scalability, integrity and more. Learn how The Digital.ai DevOps Platform (formerly XebiaLabs DevOps Platform) responds to all these problems and many more, allowing you to continue working with your favorite tools.

Leverage DevOps & Agile Development to Transform Your Application Testing Pro...Deborah Schalm

Discover how Sona Srinivasan, Senior Architect of Cisco IT’s Global Architecture and Technology Services group, helps transform an IT DevOps strategy to a Security DevOps strategy, with IBM Security's assistance. Cisco is presently implementing continuous security and agile methods throughout the software development lifecycle (SDLC), and specific examples of current initiatives will be reviewed in this session.

Continuous Testing- A Key Ingredient for Success in Agile & DevOpsSmartBear

This document discusses the importance of continuous testing in Agile and DevOps environments. It describes key elements of continuous testing including unit testing, static analysis, automation of functional and non-functional tests, service virtualization, continuous integration and delivery pipelines. The document also discusses how a collaborative DevTest platform can help by providing visibility into the testing process and enabling continuous feedback through automated reporting of test results and metrics.

Accelerate Your Digital Transformation: How to Achieve Business Agility with ...XebiaLabs

Data-Driven DevOps: Improve Velocity and Quality of Software Delivery with Me...Splunk

Much of the value of DevOps comes from a (renewed) focus on measurement, sharing, and continuous feedback loops. In increasingly complex DevOps workflows and environments, and especially in larger, regulated, or more crystallized organizations, these core concepts become even more critical. This session will show how, by focusing on 'metrics that matter,' you can provide objective, transparent, and meaningful feedback on DevOps processes to all stakeholders. Learn from real-life examples how to use the data generated throughout application delivery to continuously identify, measure, and improve deployment speed, code quality, process efficiency, outsourcing value, security coverage, audit success, customer satisfaction, and business alignment.

Security Implications for a DevOps TransformationDeborah Schalm

DevOps aims to break down silos between development and operations teams through collaboration, automation, and continuous delivery. While this provides benefits, it can also introduce security risks if security is not properly included. The presentation discusses five key aspects of a DevOps transformation and their security implications. It argues that DevOps and security are not mutually exclusive if security is incorporated through collaboration, automated testing of security requirements, and accelerating remediation of vulnerabilities.

Scale DevSecOps with your Continuous Integration Pipeline DevOps.com

Hear from AppSec and Development leaders on how they apply the principles of DevOps to deliver secure products and services to customers. Learn how you can scale your DevSecOps initiatives to reduce time-to-deployment and lower costs as you deliver secure software. During this webinar, you will learn about the latest tools and techniques that will enable your development teams to embed security scanning into your IDE as you are coding, returning most scans in seconds – all while integrating into your CI pipeline. Our speaker will provide: An overview of Veracode Greenlight and its integrations with developer tools; A summary of recent Greenlight use cases and successes; Examples of how Greenlight integrates into your CI pipeline

Introducing: Klocwork Insight Pro | November 2009Klocwork

The document introduces the Klocwork Insight Pro product, which provides static analysis and productivity tools for developers. It discusses how the product helps developers catch bugs early, automates refactoring, enables continuous analysis at desktops, and facilitates collaborative code reviews. Using the tools can help development teams improve quality, have cleaner builds, and release more secure products on time.

DevOps Powered by SplunkSplunk

DevOps is powering the computing environments of tomorrow. When properly configured, the Splunk platform allows us to gain real-time visibility into the velocity, quality, and business impact of DevOps-driven application delivery across all roles, departments, process, and systems. Splunk can be used by DevOps practitioners to provide continuous integration/deployment and the real-time feedback to help the organization with their operational intelligence. Join us for a exciting talk about Splunk’s current approach to DevOps, and for examples of how Splunk is being used by customers today to transform DevOps initiatives.

DevOps Powered by SplunkSplunk

This document discusses DevOps concepts and how Splunk can be used to power DevOps initiatives. It defines key DevOps terminology like continuous deployment versus continuous delivery and deploy versus release. It also outlines how Splunk provides visibility across the development lifecycle and operations environment. Finally, it provides examples of use cases for how Splunk can be leveraged in areas like application development, testing, automation/deployment, and collaboration to help transform organizations to DevOps.

Keynote: Puppet camp compliancePuppet

This document discusses how organizations can move from a reactive approach to compliance to a proactive approach using automation. It notes that over 50% of CIOs cite security and compliance as a barrier to IT modernization. Puppet offers an end-to-end compliance solution that allows organizations to automatically eliminate configuration drift, enforce compliance at scale across operating systems and environments, and define policy as code. The solution helps organizations improve compliance from 50% to over 90% compliant. The document argues that taking a proactive automation approach to compliance can turn it into a competitive advantage by improving speed and innovation.

Continuous Testing with Service VirtualizationSmartBear

Don't Let Technology Slow Down Your Digital Transformation XebiaLabs

This document discusses accelerating digital transformation by overcoming technical roadblocks. It recommends adopting a responsive enterprise approach with qualities like customer centricity, collaboration, and data-driven experiments. Lean practices and IT performance are foundational to agility. Automation, GitOps, connected pipelines, and quality-first thinking can improve delivery. Cloud adoption and new technologies require guidance and standardization. DevOps as a service can provide pre-defined patterns to scale practices across organizations.

Shifting the conversation from active interception to proactive neutralization Rogue Wave Software

When did we forget that old saying, “prevention is the best medicine”, when it comes to cybersecurity? The current focus on mitigating real-time attacks and creating stronger defensive networks has overshadowed the many ways to prevent attacks right at the source – where security management has the biggest impact. Source code is where it all begins and where attack mitigation is the most effective. In this webinar we’ll discuss methods of proactive threat assessment and mitigation that organizations use to advance cybersecurity goals today. From using static analysis to detect vulnerabilities as early as possible, to managing supply chain security through standards compliance, to scanning for and understanding potential risks in open source, these methods shift attack mitigation efforts left to simplify fixes and enable more cost-effective solutions. Webinar recording: http://www.roguewave.com/events/on-demand-webinars/shifting-the-conversation-from-active-interception

DevOps and SplunkSplunk

This document discusses how Splunk can help organizations with DevOps practices through concise 3 sentence summaries: Splunk allows organizations to increase application delivery velocity by providing continuous insights to devops teams from planning through monitoring. It also improves code quality by enabling code quality scans, security scans, and automated acceptance tests across the development lifecycle. Splunk further drives impact by providing visibility across infrastructure, applications, services, and tools to give insights across the entire IT environment.

Getting Started with IT Service IntelligenceSplunk

This document provides an overview of IT service intelligence (ITSI) concepts including defining services, key performance indicators (KPIs), service health scores, and entities. It discusses how to decompose high-value services and model them in ITSI using machine data. Adaptive thresholding techniques and anomaly detection are introduced to distinguish normal from abnormal KPI values. Using ITSI for root cause analysis during an outage is demonstrated. The document concludes by promoting an ITSI workshop to unlock value from data and solve important service problems.

ABC's of Service VirtualizationParasoft

Unrestrained access to a trustworthy and realistic test environment—including the application under test (AUT) and all of its dependent components—is essential for achieving "quality@speed" with Agile, DevOps, and Continuous Delivery. Service Virtualization is an emerging technology that provides DevTest teams access to a complete test environment by simulating the dependent components that are beyond your control, still evolving, or too complex to configure in a test lab. Join us for a live webinar on Service Virtualization and how it impacts software testing Access, Behavior, Cost, and Speed. Learn the basics of Service Virtualization, including how it can help your organization: Provide access to a complete test environment including all critical dependent system components Alter the behavior of those dependent components in ways that would be impossible with a staged test environment—enabling you to test earlier, faster, and more completely Isolate different layers of the application for debugging and performance testing

Scaling Enterprise DevOps with CloudBeesDeborah Schalm

Secure Data Sharing in OpenShift EnvironmentsDevOps.com

Red Hat OpenShift is enabling quicker adoption of DevOps practices. Containers are an essential component of DevOps and the OpenShift Kubernetes Container Platform is integral for orchestration within these environments. Data security is now challenged to keep pace with the size and scope of container usage. The migration from legacy in-house deployments to hybrid-cloud installations has created new attack surfaces as data is shared more freely in Kubernetes deployments. Protecting data at rest and in motions is a necessity. Learn how you can keep data protected and securely share data in OpenShift environments with real-time data protection solutions.

Is BDD Worth It? Considerations for Advanced Test AutomationPerfecto by Perforce

DevOps For Everyone: Bringing DevOps Success to Every App and Every Role in y...Siva Rama Krishna Chunduru

Value stream mapping for DevOpsMarc Hornbeek

More Related Content

What's hot (20)