DevOps
Resources

Latest:

Malicious Packages: What They Are, and How to Protect Against Them

July 21, 2023 JFrog

6 min read

If you develop software, you probably work with software packages all day long. In addition to creating packages for your own software, you rely on packages from other sources – such as third-party repositories – to satisfy your application's dependencies, set up development environments and so on. Downloading packages is convenient, because packages and package…

Read More

FILTER BY

A Comprehensive Guide to Cloud Native Technologies

A Comprehensive Guide to Cloud Native Technologies

July 6, 2022 JFrog | 10 min read

Cloud native technologies come in a variety of shapes and sizes. They all share certain key traits, such as the use of loosely coupled architectures and the ability to run in distributed environments. Beyond that, however, cloud native technologies work in different ways and solve different challenges. For that reason, mastering cloud native computing requires…
Read More
How to Choose a Docker Base Image for Python

How to Choose a Docker Base Image for Python

June 16, 2022 JFrog | 9 min read

When it comes to containerized applications, choosing the right container base image – meaning the foundational image on which you build new, customized container images – is half the battle for success. The base image you choose plays a central role in your application’s security, performance, maintainability and more. To illustrate the point, this article…
Read More
Why Use Ubuntu as a Docker Base Image When Alpine Exists?

Why Use Ubuntu as a Docker Base Image When Alpine Exists?

June 16, 2022 JFrog | 13 min read

When you’re choosing a base image for building a new container, your instinct might be to select the leanest base image possible. After all, base images that are smaller result in faster build operations. They also are more secure, in the sense that they have a smaller attack surface. That doesn’t mean, however, that smaller…
Read More
6 Cloud Native Application Design Principles

6 Cloud Native Application Design Principles

June 14, 2022 JFrog | 10 min read

What does it mean to be cloud native? One of the best ways to answer that question is to think in terms of how cloud native applications are designed. To a certain degree, this is an ambiguous topic. There is no specific type of application design pattern, coding language or hosting infrastructure that you have…
Read More
How to Improve Software Distribution with a CDN

How to Improve Software Distribution with a CDN

June 6, 2022 JFrog | 5 min read

When it comes to distributing software over a network, every millisecond may count. In other words, your ability to deliver apps or other software artifacts within fractions of a second can be critical for achieving your software delivery goals. Unfortunately, sub-second software distribution isn’t always feasible when you’re moving software over the Internet. In some…
Read More
Why and How to Perform Open Source Security Scans?

Why and How to Perform Open Source Security Scans?

May 29, 2022 JFrog | 4 min read

Open source software is great in many ways. It’s usually free of cost, it’s easy to modify or extend and borrowing open source code can reduce the time it takes to develop an app. On the other hand, a major challenge of using open source software is security. While open source is no more (or…
Read More
Guide to Vulnerability Scanning Using Software Composition Analysis

Guide to Vulnerability Scanning Using Software Composition Analysis

May 24, 2022 JFrog | 5 min read

Every software application can contain vulnerabilities. As a matter of fact, according to a 2021 report, no less than 100 percent of applications tested by security researchers included vulnerabilities, and 85 percent of them were considered critical. Fortunately, using Software Composition Analysis (SCA) tools, it’s possible to detect most vulnerabilities before you deploy software into production.…
Read More
Best Practices for Securing the Software Development Lifecycle

Best Practices for Securing the Software Development Lifecycle

May 23, 2022 JFrog | 5 min read

In a perfect world, security risks would arise at only one point in the software development lifecycle, and engineers could address them through a single set of tools and practices. But that, unfortunately, is not the world we live in. Instead, the software development lifecycle – which means the set of processes that teams perform…
Read More
7 Misconceptions about Cloud Native Development

7 Misconceptions about Cloud Native Development

May 12, 2022 JFrog | 5 min read

What is cloud native development? Those who think that it’s simply a development process hosted in the cloud or a development operation for apps that run in the cloud, may not quite understand what cloud native development really means. Indeed, it’s easy to have a number of misconceptions about how cloud native development works. Below,…
Read More
3 Essential Steps to Securing Your Docker Container Deployments

3 Essential Steps to Securing Your Docker Container Deployments

May 3, 2022 JFrog | 9 min read

Docker containers provide a more secure environment for your workloads than traditional server and virtual machine (VM) models. They offer a way to break up your applications into much smaller, loosely coupled components, each isolated from one another and with a significantly reduced attack surface. This can restrict the number of opportunities for hackers to…
Read More

Most Popular

Leveraging Cloud Native Tools in a Hybrid…
Cloud native tools, which run in distributed environments, can be deployed in any type…
The What, Why and How of Shift-Left…
We are living in an age of cybersecurity crisis, and shift-left security is part…
Software Bill of Materials (SBOM): An Overview
How can you defend against software supply chain security risks – meaning security problems…

Follow JFrog