DevOps Speakeasy with Tim te Beek and Raquel Pau at #Devnexus 2023

here here we are at that Nexus sorry for

that it’s the second day and I’m super

happy to be here with rakil and team so

um tell me what are you talking about

here at the Nexus well we are talking

about application modernization

which means that you can automatically

apply the factors in your source code at

the scale this is like a new product

category that is solving three different

use cases that are super important in

the in the industry one is the

immigration use cases so for instance uh

there are several versions of java right

now and you probably want to get updated

to the last one and this is breaking

your apis so you need to change those

apis currently usually manually and now

there is an automatic way to do that

okay okay another use case is for

security because most of the

vulnerabilities or CVS can be fixed by

updating your dependencies and it is

fine if the dependencies has a minor

version

because there are no breaking

compatibility right but they could also

uh have a major Merchant that you need

to apply and this is going to break your

apis again right so this is another use

case that we can call we can inform you

about what are the CVS that are breaking

sorry that are reporting uh some

security issues in your code and as well

I mean to fix those CVS automatically

without no planning effort right and

finally there is a third use case which

is about coding and style or static code

analysis because uh most of the tools

are reporting to you what is wrong or

what can be improved right in order to

make the code more readable

and usually this is something that you

need to change in a ripple request when

this report comes up to you

these are things that can be

automatically changed and at the end

what you are doing is running a program

and all product is based on open rewrite

which is an open ecosystem that allows

you to create receipts which is the way

that you can program those changes

automatically ah okay okay in different

programming languages oh okay

and there are multiple receipts already

indeed we are supporting almost 1 000

receipts and we have tested those

receipts in thousands of Open Source

repositories already so this is

something that you can really uh test

with confidence within your own repos

and indeed we have engaged with some

open source contributors already so they

have created some receipts but as well

we have fixed or improved their code

base already using our product are you

in contact with any uh like for example

the open SSA Foundation because this is

something that would be like really

interesting for them like they have like

for example project like scorecards that

are checking some and giving applying

some heuristics but even if like

providing this for the open source

maintainers so developers like to help

them figure out any in an easier way to

update their codes yeah so we have

Jonathan leiche who’s the friend he used

to work with modern as well and now he’s

joined the open ssf foundation I believe

ah okay and he is applying these fixes

broadly across thousands of repositories

so what he’s done in the past is fix

some like path to reversal issues and

stuff it’s it’s a clear vulnerability

across thousands of projects and he’s

opened thousands of pull requests in an

automated way through our platform as

well just to get all of those fixes in

there such that it’s not only a known

vulnerability but also a fixed

vulnerability in the next release

so he’s doing a lot of that work we

facilitate all of that and it’s just a

great help for us as well I find that

really useful and interesting and as you

said you can create your own recipes to

actually apply it okay yeah at the end

is an open platform right because since

we are relying on open Free Ride you can

create your own recipes and this creates

engagement with your own Community

because you are helping them to migrate

your new versions and therefore taking

advantage and testing those new features

that you have introduced yes exactly

okay so where they kind of start like

where is the first step for our audience

to try this or to see the examples or

yeah so there are two possible paths

right if you really want to see the

impact of the potential benefits in your

own repository you should go to

public.mob.io or even to modern.io and

you can try it out the exist internships

across thousands of repositories there

okay and there is another path which is

if you are a receipt contributor you can

play with the examples that are in the

openly right

documentation and create your ownership

and validate the recipe with existing

websites that you have in place or even

creating your own tests

real interesting

uh it’s just it sounds very very

compelling for open source developers

and even you as a developers yeah normal

and we do collaborations as well with so

we collaborate with VMware for instance

with Oracle with um redhead so they can

develop these recipes as they develop

new versions of their framework so

spring boot recently had a version

string quarkus is planning the same in

Micronaut as well and these are

Frameworks which are competing for the

developer experience trying to make it

such that you’re more productive and

facilitating the braking changes that

they’re going to introduce is a part of

that so all of them are developing

recipes so that you can migrate at the

moment that their new major version

comes out so you’re not playing catch up

but instead of publishing release notes

they’re publishing migration recipes

actually sounds compelling because

sometimes as a

roadblocks is exactly that yeah that

that’s why for example when you have to

migrate or the migration path takes a

lot of time and even courage yeah

correct and we find people get stuck on

this so they get stuck at some point

where there’s a breaking change

and sometimes there are things that you

haven’t thought and it will happen if

you don’t have the test to notice that

they are broken now it’s obviously you

not only solve what it’s broken and

evidently broken right but there is also

so proactive actions on the other side

yeah from an Enterprise perspective it’s

also super useful uh to validate if all

the repos let’s say are using a

particular standard right or a

particular technology and you want to

bump all of them

for that standard using open rewrite it

is an easy way to validate if a

particular receipt that is exiting on

the marketplace or a new recipe is

working for a particular but when you

need to really make this change in your

entire code base is a different story

and this is why the the platform

provides value to you

projects that are not actively

maintained right exactly where there is

no actually developer taking care of

that but you still need for whatever

reason bring it up to date yeah exactly

maybe you don’t know even who is owning

the triple right exactly exactly well I

think our audience will be very very

interesting in following up do you have

any final thoughts

anything well we are gonna be in other

conferences this week this uh this year

so if you will be part of uh explain IO

for instance

or uh

okay well probably we’ll see each other

then it’s a good time to be in touch

[Music]

interview

thank you