SlideShare ist ein Scribd-Unternehmen logo
1 von 36
DevOps Tools for Java Developers
Stephen Chin @steveonjava
VP of Devrel @JFrog
2
HOW I PICTURED MYSELF
DURING THE PANDEMIC
3
HOW I ACTUALLY LOOK
DURING THE PANDEMIC
Source Code
Repository
Package Manager Security Scanner
Continuous
Integration
Continuous
Delivery
Single Source
of Truth
Build and
test on every
integration
Full bill of
materials
and binary
history for
traceability
Deep scanning of
dependencies
and containers
Distribution and
automated
deployment to
the edge and
beyond
Evolution of Version Control Systems
• 1st Generation – Locking
• SCCS, RCS
• 2nd Generation – Optimistic Locking
• CVS, Subversion
• 3rd Generation – Distributed
• Git, Mercurial
Adoption of Major VCS Systems
Source: Google Trends
How Distributed version control works
Usage of developer tools
https://insights.stackoverflow.com/survey/2020
GIT-FLOW
• Development Branches:
Branch per feature
• Merge Strategy: No fast
forward merges
• Rebasing History: No rebasing
• Release Strategy: Separate
release branch
GITHUB FLOW
• Development Branches:
Branch per feature
• Merge Strategy: No fast
forward merges
• Rebasing History: No
rebasing
• Release Strategy: No
separate release branches
GITLAB FLOW
• Development Branches:
Branch per feature
• Merge Strategy: Open ended
• Rebasing History: Optional
• Release Strategy: Separate
release branches
Source Code
Repository
Package Manager Security Scanner
Continuous
Integration
Continuous
Deployment
Single Source
of Truth
Build and
test on every
integration
Full bill of
materials
and binary
history for
traceability
Deep scanning of
dependencies
and containers
Automated
deployment to
the edge and
beyond
Source Code
Repository
Package Manager Security Scanner
Continuous
Integration
Continuous
Delivery
Single Source
of Truth
Build and
test on every
integration
Full bill of
materials
and binary
history for
traceability
Deep scanning of
dependencies
and containers
Distribution and
automated
deployment to
the edge and
beyond
“AS EVERY COMPANY BECOME A SOFTWARE
COMPANY,
SECURITY VULNERABILITIES ARE
THE NEW OIL SPILLS”
Source Code
Repository
Package Manager Security Scanner
Continuous
Integration
Continuous
Delivery
Single Source
of Truth
Build and
test on every
integration
Full bill of
materials
and binary
history for
traceability
Deep scanning of
dependencies
and containers
Distribution and
automated
deployment to
the edge and
beyond
22
25
(?:(?:"|'|]|}||d|(?:nan|infinity|true|false|null|undefined|
symbol|math)|`|-|+)+[)]*;?((?:s|-|~|!|{}||||+)*.*(?:.*=.*)))
(?:(?:"|'|]|}||d|(?:nan|infinity|true|false|null|undefined|
symbol|math)|`|-|+)+[)]*;?((?:s|-|~|!|{}||||+)*.*(?:.*=.*)))
.*(?:.*=.*)
.*.*=.*
Source Code
Repository
Package Manager Security Scanner
Continuous
Integration
Continuous
Delivery
Single Source
of Truth
Build and
test on every
integration
Full bill of
materials
and binary
history for
traceability
Deep scanning of
dependencies
and containers
Distribution and
automated
deployment to
the edge and
beyond
34
ARTIFACTORY
DISTRIBUTION XRAY
CI Servers
Remote Repositories
Build Tools/Dependency
Managers
QA/QC
Provisioning Tools
1
2
3
4 5
6
7 8
10
10
Version
Control
System
Take VCS
changes
Commit the
changes
Dev.
Team
Declare new
dependencies
Resolve
dependencies
Resolve
dependencies
Resolve
dependencies
Deploy module Artifacts
and Buildinfo BOM
Contribute
Metadata
Deploy to
Production
Roll out for Internal
Distribution
Production
Servers
Build
MSBuild
DRONE
External Data Sources
Updat
e
ARTIFACTORY
EDGE
ARTIFACTORY
EDGE
ARTIFACTORY
EDGE
Analyze
Build Tools/Dependency
Managers
9
MSBuild
THANK YOU!

Weitere ähnliche Inhalte

Ähnlich wie DevOps Tools for Java Developers v2

DevOps Interview Questions Part - 1 | Devops Interview Questions And Answers ...
DevOps Interview Questions Part - 1 | Devops Interview Questions And Answers ...DevOps Interview Questions Part - 1 | Devops Interview Questions And Answers ...
DevOps Interview Questions Part - 1 | Devops Interview Questions And Answers ...
Simplilearn
 

Ähnlich wie DevOps Tools for Java Developers v2 (20)

Ramin Orujov - Android API Overview and Repository
Ramin Orujov - Android API Overview and RepositoryRamin Orujov - Android API Overview and Repository
Ramin Orujov - Android API Overview and Repository
 
Hackathon Azerbaijan Android API Overview and Repository
Hackathon Azerbaijan Android API Overview and RepositoryHackathon Azerbaijan Android API Overview and Repository
Hackathon Azerbaijan Android API Overview and Repository
 
Designing an unobtrusive analytics framework for monitoring java applications...
Designing an unobtrusive analytics framework for monitoring java applications...Designing an unobtrusive analytics framework for monitoring java applications...
Designing an unobtrusive analytics framework for monitoring java applications...
 
Increase the Velocity of Your Software Releases Using GitHub and DeployHub
Increase the Velocity of Your Software Releases Using GitHub and DeployHubIncrease the Velocity of Your Software Releases Using GitHub and DeployHub
Increase the Velocity of Your Software Releases Using GitHub and DeployHub
 
DevSecCon London 2017: when good containers go bad by Tim Mackey
DevSecCon London 2017: when good containers go bad by Tim MackeyDevSecCon London 2017: when good containers go bad by Tim Mackey
DevSecCon London 2017: when good containers go bad by Tim Mackey
 
Intro to GitOps with Weave GitOps, Flagger and Linkerd
Intro to GitOps with Weave GitOps, Flagger and LinkerdIntro to GitOps with Weave GitOps, Flagger and Linkerd
Intro to GitOps with Weave GitOps, Flagger and Linkerd
 
DevOps Service | Mindtree
DevOps Service | MindtreeDevOps Service | Mindtree
DevOps Service | Mindtree
 
DevOps Interview Questions Part - 1 | Devops Interview Questions And Answers ...
DevOps Interview Questions Part - 1 | Devops Interview Questions And Answers ...DevOps Interview Questions Part - 1 | Devops Interview Questions And Answers ...
DevOps Interview Questions Part - 1 | Devops Interview Questions And Answers ...
 
2016 Federal User Group Conference - TeamForge Capabilities and Directions
2016 Federal User Group Conference - TeamForge Capabilities and Directions2016 Federal User Group Conference - TeamForge Capabilities and Directions
2016 Federal User Group Conference - TeamForge Capabilities and Directions
 
Tracy Miranda_DevOps Loop, May 2022.pdf
Tracy Miranda_DevOps Loop, May 2022.pdfTracy Miranda_DevOps Loop, May 2022.pdf
Tracy Miranda_DevOps Loop, May 2022.pdf
 
Continuous delivery by sergey seletsky
Continuous delivery by sergey seletskyContinuous delivery by sergey seletsky
Continuous delivery by sergey seletsky
 
S3 Group on Code Management - RDK Users Conference 2014
S3 Group on Code Management - RDK Users Conference 2014S3 Group on Code Management - RDK Users Conference 2014
S3 Group on Code Management - RDK Users Conference 2014
 
Agile Secure Cloud Application Development Management
Agile Secure Cloud Application Development ManagementAgile Secure Cloud Application Development Management
Agile Secure Cloud Application Development Management
 
Top10 Characteristics of Awesome Apps
Top10 Characteristics of Awesome AppsTop10 Characteristics of Awesome Apps
Top10 Characteristics of Awesome Apps
 
Leading a Community-Driven Open Source Project
Leading a Community-Driven Open Source ProjectLeading a Community-Driven Open Source Project
Leading a Community-Driven Open Source Project
 
An Introduction to WSO2 Microservices Framework for Java
An Introduction to WSO2 Microservices Framework for JavaAn Introduction to WSO2 Microservices Framework for Java
An Introduction to WSO2 Microservices Framework for Java
 
An Introduction to WSO2 Microservices Framework for Java
An Introduction to WSO2 Microservices Framework for JavaAn Introduction to WSO2 Microservices Framework for Java
An Introduction to WSO2 Microservices Framework for Java
 
OWASP Dependency-Track Introduction
OWASP Dependency-Track IntroductionOWASP Dependency-Track Introduction
OWASP Dependency-Track Introduction
 
How do JavaScript frameworks impact the security of applications?
How do JavaScript frameworks impact the security of applications?How do JavaScript frameworks impact the security of applications?
How do JavaScript frameworks impact the security of applications?
 
Devops and git basics
Devops and git basicsDevops and git basics
Devops and git basics
 

Mehr von Stephen Chin

Mehr von Stephen Chin (20)

10 Ways Everyone Can Support the Java Community
10 Ways Everyone Can Support the Java Community10 Ways Everyone Can Support the Java Community
10 Ways Everyone Can Support the Java Community
 
Java Clients and JavaFX: The Definitive Guide
Java Clients and JavaFX: The Definitive GuideJava Clients and JavaFX: The Definitive Guide
Java Clients and JavaFX: The Definitive Guide
 
DevOps Tools for Java Developers
DevOps Tools for Java DevelopersDevOps Tools for Java Developers
DevOps Tools for Java Developers
 
Java Clients and JavaFX - Presented to LJC
Java Clients and JavaFX - Presented to LJCJava Clients and JavaFX - Presented to LJC
Java Clients and JavaFX - Presented to LJC
 
RetroPi Handheld Raspberry Pi Gaming Console
RetroPi Handheld Raspberry Pi Gaming ConsoleRetroPi Handheld Raspberry Pi Gaming Console
RetroPi Handheld Raspberry Pi Gaming Console
 
JavaFX on Mobile (by Johan Vos)
JavaFX on Mobile (by Johan Vos)JavaFX on Mobile (by Johan Vos)
JavaFX on Mobile (by Johan Vos)
 
Confessions of a Former Agile Methodologist (JFrog Edition)
Confessions of a Former Agile Methodologist (JFrog Edition)Confessions of a Former Agile Methodologist (JFrog Edition)
Confessions of a Former Agile Methodologist (JFrog Edition)
 
Devoxx4Kids Lego Workshop
Devoxx4Kids Lego WorkshopDevoxx4Kids Lego Workshop
Devoxx4Kids Lego Workshop
 
Raspberry Pi with Java (JJUG)
Raspberry Pi with Java (JJUG)Raspberry Pi with Java (JJUG)
Raspberry Pi with Java (JJUG)
 
Confessions of a Former Agile Methodologist
Confessions of a Former Agile MethodologistConfessions of a Former Agile Methodologist
Confessions of a Former Agile Methodologist
 
Internet of Things Magic Show
Internet of Things Magic ShowInternet of Things Magic Show
Internet of Things Magic Show
 
Zombie Time - JSR 310 for the Undead
Zombie Time - JSR 310 for the UndeadZombie Time - JSR 310 for the Undead
Zombie Time - JSR 310 for the Undead
 
JCrete Embedded Java Workshop
JCrete Embedded Java WorkshopJCrete Embedded Java Workshop
JCrete Embedded Java Workshop
 
Oracle IoT Kids Workshop
Oracle IoT Kids WorkshopOracle IoT Kids Workshop
Oracle IoT Kids Workshop
 
OpenJFX on Android and Devices
OpenJFX on Android and DevicesOpenJFX on Android and Devices
OpenJFX on Android and Devices
 
Java on Raspberry Pi Lab
Java on Raspberry Pi LabJava on Raspberry Pi Lab
Java on Raspberry Pi Lab
 
Java 8 for Tablets, Pis, and Legos
Java 8 for Tablets, Pis, and LegosJava 8 for Tablets, Pis, and Legos
Java 8 for Tablets, Pis, and Legos
 
DukeScript
DukeScriptDukeScript
DukeScript
 
Devoxx4Kids NAO Workshop
Devoxx4Kids NAO WorkshopDevoxx4Kids NAO Workshop
Devoxx4Kids NAO Workshop
 
Raspberry Pi Gaming 4 Kids (Devoxx4Kids)
Raspberry Pi Gaming 4 Kids (Devoxx4Kids)Raspberry Pi Gaming 4 Kids (Devoxx4Kids)
Raspberry Pi Gaming 4 Kids (Devoxx4Kids)
 

Kürzlich hochgeladen

Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Victor Rentea
 

Kürzlich hochgeladen (20)

ICT role in 21st century education and its challenges
ICT role in 21st century education and its challengesICT role in 21st century education and its challenges
ICT role in 21st century education and its challenges
 
Vector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptxVector Search -An Introduction in Oracle Database 23ai.pptx
Vector Search -An Introduction in Oracle Database 23ai.pptx
 
MS Copilot expands with MS Graph connectors
MS Copilot expands with MS Graph connectorsMS Copilot expands with MS Graph connectors
MS Copilot expands with MS Graph connectors
 
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot TakeoffStrategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff
 
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...
 
[BuildWithAI] Introduction to Gemini.pdf
[BuildWithAI] Introduction to Gemini.pdf[BuildWithAI] Introduction to Gemini.pdf
[BuildWithAI] Introduction to Gemini.pdf
 
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data DiscoveryTrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery
 
Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot ModelMcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model
 
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...
 
MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024MINDCTI Revenue Release Quarter One 2024
MINDCTI Revenue Release Quarter One 2024
 
How to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected WorkerHow to Troubleshoot Apps for the Modern Connected Worker
How to Troubleshoot Apps for the Modern Connected Worker
 
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024Finding Java's Hidden Performance Traps @ DevoxxUK 2024
Finding Java's Hidden Performance Traps @ DevoxxUK 2024
 
WSO2's API Vision: Unifying Control, Empowering Developers
WSO2's API Vision: Unifying Control, Empowering DevelopersWSO2's API Vision: Unifying Control, Empowering Developers
WSO2's API Vision: Unifying Control, Empowering Developers
 
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...
 
Exploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with MilvusExploring Multimodal Embeddings with Milvus
Exploring Multimodal Embeddings with Milvus
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
Connector Corner: Accelerate revenue generation using UiPath API-centric busi...
 
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingRepurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
 
Artificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : UncertaintyArtificial Intelligence Chap.5 : Uncertainty
Artificial Intelligence Chap.5 : Uncertainty
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 

DevOps Tools for Java Developers v2

  • 1. DevOps Tools for Java Developers Stephen Chin @steveonjava VP of Devrel @JFrog
  • 2. 2 HOW I PICTURED MYSELF DURING THE PANDEMIC
  • 3. 3 HOW I ACTUALLY LOOK DURING THE PANDEMIC
  • 4. Source Code Repository Package Manager Security Scanner Continuous Integration Continuous Delivery Single Source of Truth Build and test on every integration Full bill of materials and binary history for traceability Deep scanning of dependencies and containers Distribution and automated deployment to the edge and beyond
  • 5.
  • 6. Evolution of Version Control Systems • 1st Generation – Locking • SCCS, RCS • 2nd Generation – Optimistic Locking • CVS, Subversion • 3rd Generation – Distributed • Git, Mercurial
  • 7. Adoption of Major VCS Systems Source: Google Trends
  • 8. How Distributed version control works
  • 9. Usage of developer tools https://insights.stackoverflow.com/survey/2020
  • 10. GIT-FLOW • Development Branches: Branch per feature • Merge Strategy: No fast forward merges • Rebasing History: No rebasing • Release Strategy: Separate release branch
  • 11. GITHUB FLOW • Development Branches: Branch per feature • Merge Strategy: No fast forward merges • Rebasing History: No rebasing • Release Strategy: No separate release branches GITLAB FLOW • Development Branches: Branch per feature • Merge Strategy: Open ended • Rebasing History: Optional • Release Strategy: Separate release branches
  • 12. Source Code Repository Package Manager Security Scanner Continuous Integration Continuous Deployment Single Source of Truth Build and test on every integration Full bill of materials and binary history for traceability Deep scanning of dependencies and containers Automated deployment to the edge and beyond
  • 13.
  • 14.
  • 15. Source Code Repository Package Manager Security Scanner Continuous Integration Continuous Delivery Single Source of Truth Build and test on every integration Full bill of materials and binary history for traceability Deep scanning of dependencies and containers Distribution and automated deployment to the edge and beyond
  • 16. “AS EVERY COMPANY BECOME A SOFTWARE COMPANY, SECURITY VULNERABILITIES ARE THE NEW OIL SPILLS”
  • 17.
  • 18.
  • 19.
  • 20.
  • 21. Source Code Repository Package Manager Security Scanner Continuous Integration Continuous Delivery Single Source of Truth Build and test on every integration Full bill of materials and binary history for traceability Deep scanning of dependencies and containers Distribution and automated deployment to the edge and beyond
  • 22. 22
  • 23.
  • 24.
  • 25. 25
  • 26.
  • 27.
  • 32.
  • 33. Source Code Repository Package Manager Security Scanner Continuous Integration Continuous Delivery Single Source of Truth Build and test on every integration Full bill of materials and binary history for traceability Deep scanning of dependencies and containers Distribution and automated deployment to the edge and beyond
  • 34. 34
  • 35. ARTIFACTORY DISTRIBUTION XRAY CI Servers Remote Repositories Build Tools/Dependency Managers QA/QC Provisioning Tools 1 2 3 4 5 6 7 8 10 10 Version Control System Take VCS changes Commit the changes Dev. Team Declare new dependencies Resolve dependencies Resolve dependencies Resolve dependencies Deploy module Artifacts and Buildinfo BOM Contribute Metadata Deploy to Production Roll out for Internal Distribution Production Servers Build MSBuild DRONE External Data Sources Updat e ARTIFACTORY EDGE ARTIFACTORY EDGE ARTIFACTORY EDGE Analyze Build Tools/Dependency Managers 9 MSBuild