Interesting updates from
@CDeliveryFdn, about #Pyrsia that recently joined, #tekton that graduated, the progress with #CDEvents, and much more.
hear it from
Hear it from CDF Ambassador
@oleg_nenashev, on your favorite podcast app:
🎧 https://podcasters.spotify.com/pod/show/openobservability/episodes/Continuous-Observability-Shedding-Light-on-CICD-Pipelines---OpenObservability-Talks-S3E02-e26p5fk

Or read the TL;DR post: https://logz.io/blog/continuous-observability-cicd-pipelines/?utm_source=devrel&utm_medium=devrel

Here's the gist on YouTube:
https://youtube.com/watch?v=FEbyddZFNeo&t=1390s

#opensource #observability #cicd

Continuous Observability: Shedding Light on CI/CD Pipelines - OpenObservability Talks S3E02 by OpenObservability Talks

DevOps is not just about operating the software in production, but also about releasing that software to production. Well-functioning CI/CD pipelines are critical for the business, and this calls for quality observability, to handle broken and flaky pipeline runs effectively. On this episode I hosted Oleg Nenashev, a core maintainer and board member in the Jenkins project, as well as a TOC member in the Continuous Delivery Foundation (CDF). Oleg is a community builder, open source advocate and consultant, now at WireMock Inc. He is also a CDF and CNCF ambassador. We discussed CI/CD, observability, the prominent open source projects and foundations, as well as a new proposal for extending OpenTelemetry to natively support CI/CD observability use cases. The episode was live-streamed on 10 July 2023 and the video is available at https://www.youtube.com/watch?v=FEbyddZFNeo OpenObservability Talks episodes are released monthly, on the last Thursday of each month and are available for listening on your favorite podcast app and on YouTube. We live-stream the episodes on Twitch and YouTube Live - tune in to see us live, and chime in with your comments and questions on the live chat. https://www.twitch.tv/openobservability https://www.youtube.com/@openobservabilitytalks   Show Notes: 00:00 - show intro 01:00 - episode and guest intro 10:08 - what’s new in Jenkins 15:46 - is Jenkins cloud-native? 16:52 - understanding the CI/CD landscape 21:54 - updates from the Continuous Delivery Foundation 27:00 - CI/CD observability support in OpenTelemetry 40:31 - observability with Backstage IDP open source  47:47 - how to contact Oleg 48:51 - State of Continuous Delivery report 52:32 - OTLP 1.0 release and other open standards updates 54:32 - KubeCon will hold a dev-centric event for the first time 55:55 - Jaeger 1.47 is out 57:30 - DevOps Pulse survey insights 58:55 - outro Resources: Observability Has a Complexity Problem (APM Digest) OTLP 1.0 is out Open Standards in observability: updates from KubeCon CI/CD observability support in OpenTelemetry proposal State of Continuous Delivery 2023 report Socials: Twitter:⁠ https://twitter.com/OpenObserv⁠ Twitch: ⁠https://www.twitch.tv/openobservability⁠ YouTube: ⁠https://www.youtube.com/@openobservabilitytalks⁠ Website: ⁠https://openobservability.io/⁠ Dotan Horovits ============ Twitter: @horovits LinkedIn: in/horovits Mastodon: @horovits@fosstodon Oleg Nenashev =============== Twitter: @oleg_nenashev LinkedIn: https://www.linkedin.com/in/onenashev/ Mastodon: @asciidwarf@fosstodon

Spotify for Podcasters

Reproducible Builds also help when computing/ensuring artifact provenance with tools such as #SLSA by the #OpenSSF #Pyrsia from the #ContinuousDelivery Foundation, as rebuilders can ensure bit by bit compatibility for a given src revision.

Another step towards preventing #supplychain attacks.

One again, #JReleaser has a part to play https://github.com/jreleaser/jreleaser/issues/1349

[catalog] Add a SLSA cataloger · Issue #1349 · jreleaser/jreleaser

Its responsibility is to generate an artifact layout such as { "version": 1, "attestations": [ { "name": "project-attestation.intoto", "subjects": [ { "name": "artifact.zip", "digest": { "sha256": ...

GitHub
Supply Chain Security 101 - 202203 - english - 4k - 8k

YouTube
Supply Chain Security 101 - 202203 - english - 4k - 8k

YouTube
Supply Chain #Security - an overview for #software #developers and how to start with it - #opensource #slsa #pyrsia #cyberdefense https://youtu.be/eRitoLswHgw
Supply Chain Security 101 - 202203 - english - 4k - 8k

YouTube

Check out my overview and hands-on with Continuous Delivery Foundation Pyrsia decentralised package network: https://youtu.be/lZI_waRi1K0

And yes! If you hate YouTube or prefer reading, got you covered too: https://agardner.net/pyrsia-summary/

#cdf #cdfoundation #pyrsia #decentralized #blockchain #docker #maven #continuousdelivery

Pyrsia Overview and Hands On in 5 minutes

YouTube