Trusting Your Data: Garbage In, Garbage Out

The saying “Garbage in, garbage out” has long been used in software engineering to express the idea that poor quality input will always produce faulty output. Yet many applications still fail to apply the axiom. This can result in anything from stored cross-site scripting attacks, to SQL injections, to buffer overflows, or more benign malformed […]

Read more
5 Tips to Turn Recorded JMeter Scripts into Reusable Tests

Load and performance issues can be difficult to resolve when found late in the software development lifecycle, yet teams still often wait until the last minute to performance test their applications. This can be costly, especially if the problem ends up being an issue with the overall architecture of the application. Load and performance testing […]

Read more
Break the pipeline? That’s a notification.

Modern technology continues to accelerate the speed of delivering software, which directly increases the importance of quality awareness as early as possible within your delivery pipeline.  If you don’t know of a problem, you can’t act on it. The Email-ext plugin in Jenkins (https://wiki.jenkins.io/display/JENKINS/Email-ext+plugin) is a great way to notify relevant parties as soon as […]

Read more
Red Tape and Federated Users

Background A client recently wanted to move several DevOps and scanning tools into the cloud, to which they were in the process of proving out and transitioning. We had a number of security scanning and static analysis tools, along with corresponding dashboards and a continuous integration server to orchestrate them. All of these tools were […]

Read more
Lessons Learned from an Enterprise Government Cutover to the Cloud

On a recent government project, the DevOps team I was leading was tasked with spearheading the migration of our applications from a datacenter to the cloud. It did not go well. It almost fell into many traps that I imagine plague many cloud migrations, ranging from configuration management downfalls, to communications failures and delayed security […]

Read more
Publishing to GitHub Packages

At Coveros, we have an internal initiative — Codeveros — responsible for creating and maintaining a reference application used by our training courses. Also, we use it for evaluating new tools and technologies and for any other purpose where an application or source code is needed. Codeveros Overview At its core, it is a microservice […]

Read more
X