DevOps
Resources

Latest:

Malicious Packages: What They Are, and How to Protect Against Them

July 21, 2023 JFrog

6 min read

If you develop software, you probably work with software packages all day long. In addition to creating packages for your own software, you rely on packages from other sources – such as third-party repositories – to satisfy your application's dependencies, set up development environments and so on. Downloading packages is convenient, because packages and package…

Read More

FILTER BY

Managing Software Artifacts in DevOps

Managing Software Artifacts in DevOps

October 12, 2021 JFrog | 6 min read

If you create software, you certainly create a number of software artifacts along the way. Artifacts are a natural byproduct of the software delivery process, and managing them in an efficient and secure way is critical for ensuring the health and reliability of your delivery chain. This article explains what software artifacts are, why they…
Read More
Why and How to Run NPM Security Scans

Why and How to Run NPM Security Scans

October 12, 2021 JFrog | 3 min read

As the default package manager for Node.js, one of the most popular JavaScript runtimes, NPM is a widely used tool for creating and distributing JavaScript software. NPM makes it easy for developers to share and reuse JavaScript code via repositories, which in turn speeds the development process and simplifies the distribution of JavaScript software. From…
Read More
Managing Container Images and Helm Charts

Managing Container Images and Helm Charts

October 12, 2021 JFrog | 8 min read

Docker Hub, one of the most popular public registries for containerized applications, currently offers over five million individual container images. That astounding figure underlines just how important Docker Hub is for hosting container images that developers want to make available to the public. But despite Docker Hub’s massive popularity, the platform isn’t always the best…
Read More
How to Use Docker Security Scanning

How to Use Docker Security Scanning

October 11, 2021 JFrog | 5 min read

Since its introduction in 2013, Docker has grown into a massively popular solution for deploying applications. By allowing applications to run inside isolated environments called containers, while at the same time avoiding the extensive resource overhead associated with virtual machines, Docker provides portability and security benefits without significantly reducing system efficiency. But the isolation that…
Read More
5 Ways to Speed Up the CI/CD Pipeline

5 Ways to Speed Up the CI/CD Pipeline

October 6, 2021 JFrog | 6 min read

The purpose of any CI/CD pipeline is to enable DevOps teams to deliver software quickly and continuously. But “quickly” is a relative term. Some DevOps pipelines are faster than others. The choices that DevOps teams make about how to structure their pipelines and optimize processes within them exert a major impact on the speed of…
Read More
How to Select a Container Registry

How to Select a Container Registry

September 14, 2021 JFrog | 6 min read

With so many container registry choices available, it’s easy to find a platform that offers the level of access control, security, hosting options and performance that you need. There are more than a dozen container registries available today. Although they all do the same core job of hosting container images, they vary widely when it…
Read More
Helm Repository Best Practices

Helm Repository Best Practices

September 14, 2021 JFrog | 5 min read

Wouldn't it be great if there were a way to deploy applications on Kubernetes as quickly and easily as you can deploy them on traditional operating systems using package managers like apt and dnf? Fortunately, there is: It's called Helm, and it provides an efficient way to package Kubernetes applications, store them in Helm repositories…
Read More
How to Create a DevOps Pipeline

How to Create a DevOps Pipeline

September 14, 2021 JFrog | 6 min read

At the core of every DevOps practice is a DevOps pipeline. The DevOps pipeline provides the foundation for, and integrates together, the various tools and processes that organizations use to operationalize DevOps. While there's no one right way to create a DevOps pipeline, there are some core principles to know about. Keep reading for an…
Read More
Optimizing the Software Delivery Pipeline

Optimizing the Software Delivery Pipeline

September 14, 2021 JFrog | 5 min read

At this point in time, many organizations have already been practicing DevOps for years. DevOps pipeline automation is nothing new to them. Yet just because you may have had a pipeline solution in place for a long time doesn’t mean you can’t find ways to get even more out of it. After all, continuous improvement…
Read More
Best Practices for Configuring a Docker Registry

Best Practices for Configuring a Docker Registry

September 14, 2021 JFrog | 5 min read

It's relatively easy to set up a Docker registry and start populating it with Docker images. Most registries require just a few steps to get started. It's often harder, however, to ensure that your Docker registry is optimally configured for privacy, security and other needs. The default configurations of most registries tend not to be…
Read More

Most Popular

Leveraging Cloud Native Tools in a Hybrid…
Cloud native tools, which run in distributed environments, can be deployed in any type…
The What, Why and How of Shift-Left…
We are living in an age of cybersecurity crisis, and shift-left security is part…
Software Bill of Materials (SBOM): An Overview
How can you defend against software supply chain security risks – meaning security problems…

Follow JFrog