John Worrall, ZeroNorth CEO, expands on the "why" of DevSecOps, focusing on the business benefit, gain and measurement of what we seek to accomplish through DevSecOps. John advocates we concentrate on the process and data enabling us to assess risk, prioritize the most beneficial security work. Learn more about ZeroNorth athttps://www.zeronorth.io.

Maximizing The Benefits of DevSecOps, ZeroNorth

Stacey English, Theta Lake Director of Market Intelligence, shares the results of a report showing the usage of modern communications tools and video communications tools like Microsoft Teams, Cisco WebEx and Zoom has accelerated at a breakneck speed in recent years, and it shows no sign of slowing down.

https://thetalake.com

Communications Tools – Stacey English, Theta Lake

Mitch and Alan discuss Dagger's Solomon Hyke interview on modernizing DevOps pipelines the current realities of open source, the growth in software supply chain attacks and the value of doing smaller code reviews.

Links Referenced in Podcast:

https://devclass.com/2024/02/12/from-docker-to-dagger-solomon-hykes-on-modernisation-of-the-devops-pipeline/

https://devops.com/the-practicalities-of-open-sourcing

https://devops.com/survey-cyberattacks-aimed-at-software-supply-chains-are-pervasive

https://devops.com/improve-efficiency-with-smaller-code-reviews

Modernizing DevOps Pipelines, Open Source and Supply Chain Security

In this episode of DevOps Chats, Alan and Mitch dive deep into the heart of DevOps. After 12 years of DevOps evolution, we're asking the big question: How has our investment in DevOps paved the way for organizational success in the years to come? This segment promises a thought-provoking look at the achievements, challenges, and road ahead for DevOps enthusiasts. They discuss DevOps insights expected to be part of the upcoming Techstrong Research "DevOps Next" report. 

They also share Mitch's interview with Ben Potter, Head of Product at Coder, where he sheds light on the game-changing world of cloud development environments.

Whether you're a DevOps veteran or new to the scene, this episode has insights and stories that will enrich your understanding and spark your imagination. Join us as we explore the cutting edge of DevOps and cloud development only on DevOps Chats.

Links Referenced in Podcast:
 https://techstrong.tv/videos/interviews/cloud-dev-environments-coder-ben-potter

DevOps Past, Present, Future and Cloud Development Environments

Alan and Mitch debate whether AI can make "no shift" vs. shift left a viable future testing software in production, the "five great DevOps job opportunities" series on DevOps.com, TabNine generative AI testing platform now adds your code into the LLM to generate tests and whether DevOps should be open-ended or have an end goal.

Links Referenced in Podcast:
https://devops.com/forget-shift-left-why-no-shift-is-the-future-of-software-innovation/
https://devops.com/five-great-devops-job-opportunities-77/
https://devops.com/tabnine-extends-generative-ai-testing-platform-by-embracing-rag/
https://devops.com/devops-whats-the-end-goal/ 

No No-Shift, DevOps Jobs, AI Tests Your Code, DevOps End Goal

Alan and Mitch discuss whether platform engineering will be "the game changer" some predict will happen in 2024, the evolution of CI/CD frameworks (ArgoCD, Tekton), and Mitch's interview with Cole Kennedy, TestifySec CEO, about securing software from source to production.

Links Referenced in Podcast:

https://devops.com/platform-engineering-the-2024-game-changer-in-tech
https://devops.com/driving-the-devops-evolution-argocd-tekton-and-seamless-migrations https://techstrong.tv/videos/interviews/securing-source-to-production-with-testifysecs-cole-kennedy

Platform Engineering in 2024, CI/CD Frameworks and Securing Source to Production

Alan and Mitch discuss several AI and DevOps topics, including the debate of whether DevOps failed us or if platform engineering is ignoring history; Tabnine is a Microsoft copilot alternative to generate code ; and does your Gen AI get mentally stuck on one path of thinking.

Reference Links: 

Tabnine:
https://devops.com/tabnine-extends-gen-ai-platform-for-writing-code-to-multiple-llms

AI:
https://devops.com/your-ai-might-be-lying-to-you

DevOps Platform Debate, Copilot Alternative and Did your AI lose its mind

After being on the conference circuit for weeks, Alan and Mitch explore whether GPT-4o might show the way for new web and mobile experiences, the upheaval happening in open source and what happens when business models and financial interests force business licensing changes and move away from the spirit of open source.

GPT-4o, Open Source Clashes With Benevolent Capitalism

In this episode of DevOps Chats, Alan Shimel and Mitch Ashley discuss the rapid integration of AI co-pilots in software tools, emphasizing the need for a unified AI interface to streamline user experience. They explore the evolving concept of DevSecOps, advocating for a holistic approach that includes both software development and underlying toolchain security. The chat also teases upcoming research reports on DevOps trends and AI's role in the industry.

AI in DevOps: From Co-Pilots to Future Trends

Integrating AI Co-Pilots and DevSecOps

Mitch and Alan discuss what's required to take a holistic approach to software supply chain security and how DevOps has not only survived, but thrived as it's adapted over the years and helped for new XOps variations and platform engineering.

DevOps Thrives and Software Supply Chain is the SBOM

After a brief podcast hiatus, Mitch and Alan discuss why it isn't a DevOps versus platform engineering debate. Rather, platform engineering helps scale DevOps, among PE's many, many benefits. They discuss the launch of platformengineering.com and its new podcast. They also delve into the debate about AI's impact on software development.

Platform Engineering Scales DevOps and the AI Dev Bubble

 In this episode of DevOps Chats, Alan speaks with Patrick Debois, the man who coined the term DevOps to talk about his new passion AI NativeDev. Beyond giving it a name, Patrick has always been one of the leading lights of the community. After 12+ years in DevOps thought, Patrick’s enthusiasm was starting to wane. AI has reignited that and his creative juices are flowing freely. He has joined in the new AI NativeDev community that is really catching fire. Here what they are about and what has Patrick so excited in this episode

AI Native Dev: Shaping the Future of AI-First Software Development - DevOps Chats Episode 12

Devops Chat - Mobile To Mainframe

Alan Shimel, Editor-in-Chief of DevOps.com, chats with Gary Gruver, author of "Leading the Transformation: Applying Agile and DevOps Principles at Scale".

DevOps Chat - Leading the Transformation

In this chat we spoke with Prem Chandraskearan, VP of Software engineering at Barclaycard. Prem has led the DevOps transformation there. He sums up his learning with this:

The best way for an organization to approach DevOps is from a collaborative angle. When development and operations experts actively work together in a cohesive effort, solutions are well designed, efficient and smart from both a development and maintenance perspective. When operations is viewed as a software problem, Dev and Ops can work in tandem to implement a tool that is holistically a part of the process from start to finish. 
 
DevOps is always a work in progress, but the initiative can only improve with quality resources that implement a variety of backgrounds and perspectives on both Dev and Ops working together. Barclaycard has had some interesting challenges with DevOps due to being in the credit card/banking industry, so for example, the “you build it, you run it” mantra doesn’t work as well for us as it would for other enterprises implementing DevOps. It is definitely a learning curve, and our goals and best practices are still coming to fruition, but we are continuing to find ways to automate.
 
The best way to get teams to work together is to simply ensure that they are not in silos, meaning that if there are distinct dev and ops teams, they must spend time in each other’s sectors to understand the pains, how the functions work, what makes it tick, etc. When the development and maintenance perspective are strategized in tandem, it automatically makes for a better, more streamlined workflow.
 
The best way to ensure a DevOps initiative’s long-term success is to ensure that the foundation of the program is collaborative and understanding of how each function works. With this, automation testing for failure is imperative to discover problems that are typically only otherwise found in production. If all the bases are covered and the process is streamlined and collaborative, the overall quality of your DevOps function will be much higher.

DevOps Chat

DevOps Best Practices w/ Prem Chandrasekaran, VP Software Engineering, Barclaycard

In this DevOps Chat we speak with Scott Wilson of CA Automic about the modern software factory, software pipelines, CD/ARA and more. That is a lot packed into just about 15 minutes!
Scott is always an interesting guest with good things to say and learn from. Enjoy!

The Modern Software Factory w/ Scott Wilson, CA Automic

When two legends in the InfoSec world start a new company, people take notice. Jeremiah Grossman and Robert "RSnake" Hansen recently announced their new venture BitDiscovery (http://www.bitdiscovery.com) was coming out of stealth, fresh off a venture raise and the acquisition Robert's company, Outside Intel. 
BitDiscovery offers a radically different way of doing asset inventory and website discovery. Rather than scanning when you want to discover your assets, with BitDiscovery, you just query the master database that the company has assembled and it tells you what it has already found there. 
This is possible because BitDiscovery keeps a snapshot updated constantly of just about the entire Internet. That is one Big Data based solution right there. 
Robert and Jeremiah are just the kind of guys to make something like this work. Also after speaking to them, I believe that with that kind of data, there will be a lot more uses for this technology that will present themselves to the BitDiscovery team.  
With the track record of these two pioneers, look for big things!

Security Boulevard Chats

BitDiscovery - A Revolutionary Way To Track All Of Your Digital Assets

Accelerate - The State of DevOps Report by Dr. Nicole Forsgren and the folks at Dora (now part of Google)is far and away the most widely cited research in the DevOps field.  Dr Nicole and her team have brought scientific rigor to the survey over these past 6 years and the results show it.

Here is your chance to shape the future of the DevOps market by taking 25 minutes of your time and take this years State of DevOps Survey. These reports are only as good as the info they gather.

So have a listen to our conversation and then please go take the survey! https://bit.ly/2UzLMH2

Accelerate, The State of DevOps Report w Dr. Nicole Forsgren

More than ever, application security is a top priority. Beyond secure coding practices, a holistic app security strategy addresses the full application and infrastructure stack. This includes containers, microservices, orchestration, infrastructure software, and the cloud. Bolting on the next security tool may not be the answer.

Kamal Shah, StackRox CEO, joins us on this episode of DevOps Chats, diving into the need for a systemic security approach across the lifecycle of cloud-native, even "Kubenative", applications.  We explore how Kubernetes and cloud-native apps bring access to rich configuration information, usage visibility, runtime context, inherent security controls, and compliance. It's a fascinating conversation that will open up new paths to secure Kubernetes and cloud-native applications.

Holistic Kubernetes and Cloud-Native App Security, StackRox

Spinnaker Summit 2019 Preview: Airbnb is rapidly moving from a  monolith Ruby on Rails application to a distributed SOA/Kubernetes architecture in Kubernetes. The new architecture uses self-service codified pipelines and easy webhook integrations scale adoption and collaboration across the company. Even though continuous integration isn't new to Airbnb, every team now needs to be able to scale CI across 100's of containerized services in AWS EC2.

Software Engineer Brian Wolfe co-led the decision to move to Spinnaker and build in more automation. At one year into the project, Airbnb has 40 services in production with many more to follow.

This episode of DevOps Chats features a preview of Brian's talk; “Scaling a Migration to Continuous Delivery (Aribnb)”.  Brian's talk is on Saturday, November 16 11:00 am, at Spinnaker Summit 2019 in San Diego.

Scaling a Migration to Continuous Delivery at Airbnb, Spinnaker Summit 2019

In this episode of DevOps Chats we talk with Donald Lutz, Principal Software Architect, specializing in systems integration and creating large, scalable cloud applications. Occasionally DevOps Chats is fortunate to spotlight DevOps and cloud native developers doing trailblazing work in contemporary software architectures. Donald fits that bill to a "t.", as an entrepreneur and employee at startups like Faction, BoldTech Systems, and his own company Technetronic Solutions,  and established companies including Via West.

Our discussion focuses on creating cloud native applications in startups and large enterprise IT. Donald's currently working with one of the world's largest financial institutions to move from legacy applications directly to cloud native apps, bypassing any interim lift-n-shift moves. His work spans many Microsoft technologies, including .NET Core, runtime framework Dapper for RDBMS mapping, Service Fabric, and Azure, and opensource Kubernetes,  Terraform, and Puppet (and Enterprise).

During our discussion, we cover the challenges of architecting and scaling very large cloud native applications, implementing DevOps in less mature software organizations, how established software patterns benefit DevOps and cloud app developers, and the importance of giving back by hosting meetups to share knowledge and mentor others. Donald also gives back as an active leader and mentor of the FIRST Robotics Team 1410 since 2005. Join in on our conversation as we explore the complex and sophisticated inter-workings of a cloud native software architect.

Software Architecture for Cloud Native, .NET Core, & Open Source, Donald Lutz

Test automation and CI/CD are evolving very rapidly to achieve great speed and impactful results by DevOps teams and Agile organizations. Our DevOps Chat guest, Tricentis Chief Product Officer Wolfgang Platz,  contributes his experiences to the state of the art with his newly released book Enterprise Continuous Testing. 

Automating software testing just for the sake of automation, is "doing the mess for less." What is the business value of each software element you are testing, and what is the right strategy for testing these software implemented functions? Automation certainly brings with it speed, but are we ultimately making incremental improvements to testing which doesn't tap into the full power and benefits of automated software testing. 

Our discussion with Wolfgang focuses on the need for expanding dev-testing with higher-level integration, system, and end-to-end user experience testing, which are often performed well by shared testing and operations teams. Now, think Shift Right. While Agile and dev teams often focus on the progression of creating new and exciting capabilities for the business and our customers, we still require that regression mindset that consistently validates unit tests, valuable business functionality, system integrity, performance, and operational needs.

Enterprise Continuous Testing With A Shift Right Mindset, Tricentis

Sometimes the best way to accomplish something is to choose a path requiring the least friction, or amount of change. 

Qualys customers now have that path available to them in bring vulnerability scanning into Google Cloud Platform. Qualys' recent announcement means a one-click configuration change enables vulnerability scans in GCP with the results appearing in both Qualys Cloud Center and GCP Security Command Center. 

Join me on this DevOps Chats to explore this announcement with Sumedh Thakar, Qualys President and Chief Product Officer. We discuss Qualys' and Google's collaboration and how this benefits DevOps teams.

One-Click Vulnerability Scan Integration with Google Cloud Platform, Qualys

The whole Data/DataOps space is becoming very hot. For StorPool it is more of a case of the rest of the world catching up to what they have been doing for a while now.  They are the leading distributed block storage provider globally.

In this DevOps chat we speak with Boyan Krosnov, founder product at StorPool. Boyan gives us the background on StorPool as well as a good look at the state of the distributed storage/data market.

StorPool software defined storage

ITIL is well established as the process, certification and information resource library for service management across many IT organizations globally. With the recent updates comprising to ITIL 4, influences from Agile and DevOps are helping ITIL to expand and adapt to changes in how create software and build operations into the delivery process.

Akshay Anand, Product Ambassador with AXELOS Global Best Practice, and Jon Stevens-Hall, Principal Product Manager at BMC Software, join Accelerated Strategies Group CEO Mitch Ashley to discuss the new innovations in ITIL 4. As major contributors to ITIL 4, Akshay and Jon share the approach they took with ITIL 4, incorporating ideas from the world of Agile and DevOps.

ITIL 4 in the Age of Agile and Devops, Axelos

Akshay Anand, ITSM product ambassador at AXELOS, and David Crouch, senior advisor at Beyond20, join ASG CEO Mitch Ashley to share best practices and learnings from introducing and adopting Agile and DevOps in large organizations. Akshay and David discuss overcoming change management challenges and obstacles to increase adoption.

ITIL 4 - Introducing & Adopting Agile + DevOps in Large Organizations

Mark Smalley of Smalley.IT, and Lead Editor with Axelos of the ITIL 4 High Velocity, IT joins ASG CEO Mitch Ashley to discuss his work creating this new contribution to ITIL 4. Mark shares the 5 value investments important for organizations seeking to operate at high velocity and some of the insights gained from himself and others covered in this ITIL 4 module.

ITIL 4 - Achieving High Velocity IT, AXELOS

Home » Blogs » DevOps Unbound » DevOps Unbound: How to Lead a DevOps Transformation

DevOps Unbound: How to Lead a DevOps Transformation
DevOps Unbound: How to Lead a DevOps Transformation
BY ALAN SHIMEL ON NOVEMBER 27, 2020 1 COMMENT (EDIT)

Is C-level support required to have a successful digital transformation? In the sixth episode of DevOps Unbound streaming broadcast on TechStrong TV and DevOps.com’s sister site Digital Anarchist, Mitchell Ashley of ASG and Alan Shimel are joined by Eveline Oehrlich of the DevOps Institute, Louise McCarthy of Bain & Company and Mark Settle, author of “Truth from the Valley, A Practical Primer on IT Management for the Next Decade,” to discuss DevOps and digital transformation at the C level.

devops unbound

Digital Transformation at the C level

Colby Dyess, Director of Cloud Product Management at Tufin, joins Mitch Ashley, CEO of Accelerated Strategies Group, to discuss security policy management across hybrid cloud, multi-cloud and cloud-native security.  Colby shares experiences from working with customers during the rapid migration to the cloud in 2020.

Learn more about security policy management and hybrid clouds at Tufin (https://tufin.com)

Security Policy Management and Hybrid Cloud, Tufin

"DevOps Chats" by Techstrong Group, the force behind industry-leading platforms like DevOps.com, Cloud Native Now, Security Boulevard, Techstrong.ai, DigitalCxO, and Techstrong.TV, is your premier destination for all things DevOps. Hosted by industry veterans Alan Shimel and Mitchell Ashley, this podcast series delves deep into the world of DevOps, bringing you the latest trends, innovative strategies, and insightful discussions that matter.

Each episode of "DevOps Chat" is a journey through the evolving landscape of DevOps, featuring interviews with thought leaders, practitioners, and change-makers who are shaping the future of technology. Whether you're a developer, operations professional, IT leader, or tech enthusiast, Alan and Mitchell ensure you stay informed, engaged, and ahead of the curve.

From continuous integration and delivery to cloud-native development and cybersecurity, "DevOps Chat" covers the spectrum, offering valuable lessons, expert advice, and engaging stories. Tune in to explore how DevOps principles and practices are transforming the tech industry, driving efficiency, enhancing security, and fostering innovation.

Join us at "DevOps Chat" for your regular dose of DevOps insights, inspiration, and community. It's not just a podcast; it's your gateway to the forefront of the DevOps movement. Subscribe now and be part of the conversation that's setting the pace for the future of technology.

Popular tracks by DevOps.com