January 2021 Summaries

Many DevOps teams are concerned about the security of their software development life cycle (SDLC) due to the increasing sophistication of hacker threats and the need for stringent security measures. To address these concerns, JFrog and Google Cloud are hosting a webinar titled "Your Software is Secure Until it’s Not" on February 10, featuring experts like JFrog Developer Advocates Kat Cosgrove and Melissa McKay, and Google Senior Staff Engineer Seth Vargo. The webinar aims to provide insights, tips, and recommendations on vulnerability detection, SDLC security use cases, managing third-party open-source software, and CI/CD security automation. The session promises to be interactive, featuring discussions and audience questions, and is designed to help teams integrate security into their SDLC for safer, faster, and more agile software development.

The JFrog Artifactory App for Jira creates a seamless and traceable connection between Jira Cloud issues and builds on the JFrog DevOps Platform, enhancing the speed and efficiency of software development and release processes. Once installed, the app allows users to view builds in Artifactory and identify which Jira issues have been fixed, as well as view specific issues in Jira and see the corresponding builds in Artifactory. This integration relies on tagging Git repository check-ins with Jira issue keys, a best practice enforced by many companies, enabling Artifactory to collect issue key messages and log them with builds for a comprehensive view of build information. Available through the Atlassian Marketplace, the app requires configuration with Artifactory Cloud service credentials. Although currently limited to cloud subscriptions, JFrog plans to extend this functionality to self-hosted or on-prem editions, further enhancing visibility and control over builds.

Release management is crucial for DevOps teams aiming to implement automated continuous deployment systems, as it enhances organizational efficiency. Modernizing infrastructure for the cloud, often on platforms like AWS, is vital for globally distributing trusted releases, utilizing AWS edge services to deliver production applications efficiently. A webinar hosted by JFrog, featuring AWS Container Specialist Solution Architect Anuj Sharma and JFrog Developer Advocate Sven Ruppert, will address key aspects of software distribution through hybrid infrastructure. Attendees will gain insights into overcoming software distribution bottlenecks, migrating and modernizing with AWS, securing infrastructure using JFrog Platform and AWS, and effectively managing and delivering immutable release bundles worldwide. The webinar will also cover use cases for various software distribution methods, including CDN, peer-to-peer, and air-gapped distribution, emphasizing the importance of efficient, continuous, and secure software distribution.

The partnership between Docker and JFrog allows JFrog Cloud subscribers to bypass Docker Hub's image-pull rate limits, offering unlimited access to Docker Hub for cloud-native application development. This collaboration aims to enhance the DevOps community by providing a seamless developer experience, flexibility in tool selection, and enterprise-grade reliability. The partnership addresses Docker's previous consumption-based limits, which capped free users' image pulls, potentially affecting enterprise productivity. By utilizing JFrog Artifactory as a local cache and container registry, users benefit from improved productivity, optimized IT resource usage, enhanced security through JFrog Xray scanning, and reliable access to critical images. The agreement reduces business risks by preventing interruptions in build environments and offers comprehensive security and compliance insights across the DevOps pipeline. Additionally, JFrog supports self-hosted customers by providing guidance on authentication to avoid restrictions, allowing users to focus on development rather than managing Docker Hub pulls.

In 2020, JFrog experienced a transformative year influenced by the global pandemic, which accelerated digital transformation and highlighted the importance of robust DevOps solutions. The company launched the JFrog Platform, the first end-to-end, hybrid, universal DevOps platform, designed to meet increased demands on developers for faster, more secure, and cost-effective software delivery. The pandemic underscored the necessity of these solutions, prompting rapid adoption. JFrog also made headlines by becoming the first pure DevOps company to go public on NASDAQ, marking a significant milestone in the evolution of software development. The company's commitment to innovation was recognized with multiple industry awards, while its free community cloud offering aimed to support the DevOps community by providing versatile package management, security, and CI/CD tools. Looking ahead to 2021, JFrog plans to enhance its software package-centric approach, expand cloud provider support, and focus on seamless DevSecOps and broader integration to maintain its competitive edge in the DevOps landscape.

JFrog's 2020 collection of content, including blogs, articles, and infographics, provides valuable insights for the DevOps community, covering a range of topics from container registries to high-availability Maven repositories and Helm tutorials for Kubernetes. Notable pieces include an introduction to container registries by Kat Cosgrove, a guide on setting up Docker registries by Melissa McKay, and tips for achieving high availability by Pavan Belagatti. Jens Eckels provides an analysis of cloud DevOps solutions, helping organizations evaluate platforms based on criteria like user experience and security. The launch of JFrog's comprehensive DevOps platform, as explained by CEO Shlomi Ben Haim, offers a unified approach to binary management, DevSecOps, and CI/CD. Additionally, JFrog contrasts its Artifactory with AWS CodeArtifact, discusses the security challenges of cloud-native computing, and addresses the implications of Docker deprecation in Kubernetes. The importance of software distribution is highlighted by Avigail Ofer, while Docker's report on increased container usage underscores developers' crucial role in innovation.