Gaining Observability Into CI/CD Pipelines - Improving Developer Productivity
Practical guidance on implementing observability in CI/CD pipelines to boost productivity, improve failure response, and enhance engineer quality of life through intelligent data collection, dashboarding, and alerting.
Bisection: It's Not Just for Git - Multi-Axis Regression Analysis
Explore a multi-axis bisection tool for efficient performance regression detection in QEMU, inspired by Git bisect and designed for Jenkins pipelines.
The New Wave of Deserialization Bugs
Explore deserialization vulnerabilities in Java, PHP, and Python. Learn to identify and mitigate risks in enterprise applications using practical examples and tools.
State of the Osmocom TTCN-3 Test Suites
Comprehensive overview of Osmocom TTCN-3 test suites, covering their status, testing methods, and automation using Jenkins and Docker for mobile network protocols.
Security DevOps - Staying Secure in Agile Projects
Explore security integration in agile projects through dynamic depth, static depth, intensity, and consolidation axes. Learn practical DevOps techniques for maintaining security throughout development.
Osmocom Project Infrastructure - Redmine, Mailman, Git, Gerrit, Jenkins
Explore Osmocom's open-source infrastructure: communication tools, project management, version control, and continuous integration for efficient FOSS development.
A Practical Guide to Fuzz Testing Embedded Software in a CI Pipeline - Dennis Kengo Oka - Ekoparty 2021: Hardware Hacking Space
Practical guide to implementing automated fuzz testing in CI pipelines for embedded software, using Zephyr RTOS as an example. Learn strategies, execution, and vulnerability detection.
Interact Differently - Get More from Your Tools Through Exposed APIs
Explore how to leverage exposed APIs and plugin interfaces in software tools to enhance functionality, streamline workflows, and create custom solutions for improved efficiency and effectiveness.
Brakeman & Jenkins - The Duo Detects Defects in Ruby on Rails Code
Explore static analysis tools for Ruby on Rails, focusing on Brakeman and Jenkins integration. Learn about security warnings, code updates, and best practices for detecting defects.
AppSec Pipelines and Event-based Security - Moving Beyond a Traditional Security Test
Strategies for scaling AppSec programs using automation, continuous health checks, and event-based security to keep pace with rapid software development and delivery in large organizations.
Open Source Security Tools for Kubernetes Applications
Explore open-source tools for securing Kubernetes applications, covering image scanning, runtime security, and anomaly detection. Learn practical strategies for maintaining a secure cloud-native environment.
Living on Master - Using Yocto Project, Jenkins and LAVA for a Rolling Release
Explore continuous integration for Yocto Project using Jenkins and LAVA, focusing on real-time Linux kernel testing and addressing challenges in maintaining up-to-date embedded systems.
Android Meets Docker
Explore Docker's impact on Android development, enhancing CI, ensuring consistent environments, and solving common issues. Learn setup, benefits, and limitations through examples and live demos.
Coding Secure Code - Best Practices, Advice for Writing Secure Code
Discover best practices for writing secure code, focusing on business-driven approaches, understanding your model, and integrating security seamlessly into development processes.
Hacking the DevOps Butler - From Nothing to Admin
Explore Jenkins vulnerabilities and exploitation techniques, focusing on two critical flaws that allow unauthenticated attackers to gain admin access and control entire infrastructures.
Hacking Jenkins
Exploring Jenkins vulnerabilities, including dynamic routing misuse and Groovy sandbox escape. Learn to build custom gadgets and exploit Jenkins through unconventional methods.
Got Popcorn? What's on the Vuln Channel Tonight?
Explore a platform for automated code scanning and vulnerability data streaming, designed to provide developers with fast, timely information on potential security issues.
Automated Performance Budgeting into Your Pipeline with Sitespeed.io - JSConf US
Explore automated performance budgeting using sitespeed.io, focusing on front-end optimization for large organizations and the future of performance testing tooling.
The Road to Interoperability in Cloud Native Continuous Delivery
Explore challenges and solutions for interoperability in cloud native continuous delivery, focusing on end-user cases and community-driven approaches for a more sustainable ecosystem.
Continuous Integration
Explore continuous integration for projects of all sizes, learning about tools, implementation strategies, and how to make it work effectively for your development process.
The Journey Towards Continuous Integration
Journey towards Continuous Integration: Implementing automated testing, coding standards, and CI practices. Strategies for gaining support, choosing tools, and demonstrating benefits to developers and management.