Related to DevOps and automation
An overall Site Reliability strategy should always be based on data and metrics. However having the right metrics is a key challenge to evolve services and practices internally. The rise of agile, DevOps and...
Craftmanship / DevOps / Web development
by shenril
by shenril · Published 28/12/2020 · Last modified 29/12/2020
What is composer? Composer, created in 2012, is a dependency manager for PHP, it allows you to handle packages and their version to include in your project. You could compare it to Ruby Gem...
Even though most of the security breaches nowadays come from applications, security is still an after thought in companies policies. Still too few resources are dedicated to improve security during the development process and...
The primary aim of the OWASP Application Security Verification Standard (ASVS) is to normalize the range in the coverage and level of rigor available in the market when it comes to performing web application security verification. The ASVS standard provides a basis...
As a continuous improvement process and just like firemen, IT Operations should spend some time on trainings about various scenarios. I believe it helps preparing in the case of unpleasant events, disaster or at...
More
CE SOIR C'EST...
🎙️Review de l'actu IT/Dev et discussions sur le métier de dev avec @LiiorC @XavierAgap1 @willtraore @iamdeafmute @silvereledev
📌 RDV à 21h30 sur http://twitch.tv/silvereledev
Psssst ! N'hésite pas à RT pour faire découvrir l'émission 🫶
🇨🇭 Amazon Web Services is officially located in Zurich, Switzerland! 🇨🇭 They’ve opened new data centers to host their cloud solutions in the alpine nation. Camptocamp’s Head of Infrastructure @mbornoz explains why this is great news for our clients. https://www.camptocamp.com/en/news-events/aws-in-switzerland
Super excited for this project! I love the fact that the team focuses on building things that can be used broadly with the primary attention to safety for all: https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/
Just released a new tool: GuardDog, identify malicious PyPI packages with Semgrep and package metadata analysis
https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/
https://github.com/datadog/guarddog/
Bonus: a corpus of 140+ actual malicious packages we found in the wild
https://github.com/DataDog/security-labs-pocs/tree/main/malware-samples/pypi
