DEVOPS THAT MATTERS Demystifying CI/CD and Build Pipelines

Melissa McKay @melissajmckay DEVELOPER ADVOCATE at JFROG

?? ? ● ● ● ● Define DevOps Describe Components Your IT Value Stream Some Stories/Suggestions

WHAT IS DEVOPS … DEVSECOPS? The Phoenix Project Gene Kim, Kevin Behr, George Spafford “Every person involved in a failed IT project should be forced to read this book.” ―TIM O’REILLY, Founder & CEO of O’Reilly Media The Unicorn Project Gene Kim The DevOps Handbook Gene Kim, Patrick Debois, John Willis, Jez Humble, John Allspaw

5 4 Commit the changes 6 Build CI Servers Take VCS changes Version Control System Dev. Team DRONE Declare new Resolve dependencies 1 dependencies Build Tools/Dependency Managers Build Tools/Dependency Managers 8 Deploy module Artifacts 7 MSBuild and Buildinfo BOM Resolve 2 dependencies ARTIFACTORY Roll out for Internal 10 Distribution Analyze DISTRIBUTION XRAY Contribute 9 Metadata QA/QC Updat e MSBuild External Data Sources ARTIFACTORY EDGE Remote Repositories ARTIFACTORY EDGE ARTIFACTORY EDGE Resolve 3 dependencies 10 Deploy to Provisioning Tools Production Production Servers

DEV(SEC)OPS COMPONENTS Source Code Repository Continuous Integration Single Source of Truth Build and test on every integration Package Manager Security Scanner Full build of materials and binary history for traceability Deep scanning of dependencies and containers Continuous Deployment Automated deployment to the edge and beyond

WHAT DO YOU REALLY CARE ABOUT? ● ● ● ● Fast? Efficient? Reliable? Economical?

LOGGER.info(“In function transformMedia”); 9

ELIMINATE SILOS! 10

YOUR IT VALUE STREAM 11

LET’S TALK PIPELINES 12

IMPROVE BY 1% ● ● ● ● Fast Enough? Efficient Enough? Reliable Enough? Economical Enough? 13

RECOGNIZE THE PROBLEM 14

CODE, TEST, CHECK-IN, REPEAT

KNOW YOUR BUILD!

TEST, TEST, & TEST www.testcontainers.or g 17

HOW DO YOU DEPLOY?

Q&A THANK YOU!