January 2023 Summaries

With this integration, users can monitor key Cloudsmith data within the Roadie developer portal, simplifying the process of keeping tabs on their package management services. The integration allows customers to quickly see what teams are using Cloudsmith and key data about their Cloudsmith account in one convenient location. By connecting Cloudsmith with Roadie, users can centralize information in one place, making it easier to manage their software catalog and developer portal.

The 2023 predictions for DevOps and Software Supply Chain Security discussed in the webinar include reducing toolchain complexity, making SBOMs (Software Bill of Materials) more useful and actionable, prioritizing developer experience and productivity, and addressing distributed engineering teams. The conversation also touches on platform engineering versus DevOps, software bill of materials, and how to make them actionable and easy for developers to use. The panelists emphasize the importance of security, compliance, and governance in the development process, with a focus on making it more efficient and user-friendly for developers.

CircleCI is investigating a security incident that affected their platform and customers, recommending actions for all impacted customers to take in response. Cloudsmith, a user of CircleCI, took proactive measures by rotating sensitive secrets held within secure pipeline contexts after becoming aware of the incident, as part of its existing policy to regularly rotate secrets. Additionally, Cloudsmith verified no unauthorized access attempts were made during the incident through audit logs and observability platforms.