Ok, but as developer, does really matter that Mythos apocalyptic alarm? Is there an intelligent SAST? Yes, the intelligent SAST version you are looking for exists and is native to the Semgrep ecosystem. It is called Semgrep Assistant, which runs on top of the Semgrep AppSec Platform. Recently, Semgrep also introduced Semgrep Workflows, allowing you […]
Tag: jenkins
Automate it when it matters
Back to 2017, Starsellersworld want to develop a new tool for people working in the seller’s store and dealing with shipments directed to customers. One of the key work behind every online sellers is to pack and ship the package to the customer, as soon as the order is received, accepted, and invoiced. As a […]
My latest LLM code nightmare
Customer needs to automate code statical analysis into the integration workflow using a SAST tool. The detailed task specification comes from ChatGPT, suggesting semgrep ran from a docker image semgrep/semgrep. I thought it wasn’t a bad idea. ChatGPT suggested to integrate the tool as a pre-commit git hook, that is fair for local development, but […]
The tale of Jenkins update to Java Jdk21 and Matrix Auth plugin
I passed a long day dealing with Jenkins runtime update (from jdk17 to jdk21), and authorisation plugin (Matrix Auth) stopping to work. Here is the tale. Involved system: Error log messages was related to hudson, and to matrix, and to authorization: Caused: jenkins.util.xstream.CriticalXStreamException: [LF]> —- Debugging information —-[LF]> cause-exception : com.thoughtworks.xstream.mapper.CannotResolveClassException[LF]> cause-message : hudson.security.GlobalMatrixAuthorizationStrategy[LF]> class […]
System topology of CI/CD Jenkins talking with Docker registry
Nowaday Docker Swarm is an entry level project, used just for study purpose. But really there was a time when it was competing with Kubernetes, just because it is simpler, easy to setup and maintain, and with a quick learning curve. These aspect make Docker Swarm ideal for starting to thinking about microservice architecture, design, […]
Dive into (useless?) uncovered case of multistage dockerfile
Looking at the upstream documentation of Multi-stage builds there are some examples but this is missing: Ok, I mean, the example by itself is useless, but “it works”. Try: docker build -f Dockerfile -t copiedfrom-rust:v0.1 . Then: docker run -it copiedfrom-rust:v0.1 sh Real use case scenario Lets get serious now: why? Suppose you are inside […]
My 2 days Journey on moving services to a swarm
I work for starsellersworld.com, I wanted my company start to use tool for tracking project development in a centralized way, Jira was expensive as resource, and I can not ask such a step, so I asked a machine were to run Redmine. Then it cames the gogs, and, after little time, Jenkins. A number of […]
git-merge: the github conference (Microsoft 2019)
Remembering those nice days in Brussels, where I visit le Grand Platz, having good lamb’s meals, visiting Van Gongh – The immersive experience, Atomium (my video). But mostly I attended the conference on github, updating my skills on managing code base, contribute code, sending PR, rollback error, inspecting … The conference happened in South of […]
Lo sporco lavoro del CI/CD e DevOps
Ora racconto una storia. Beh, la faccio breve, si è fatta una certa. Da quando c’è bisogno di rilasciare il software in tempo reale sono stati scritti diversi software di supporto per fare lo sporco lavoro di: eseguire test, impacchettare, distribuire i pacchetti nei vari server di destinazioni. Uno di questi è Jenkins, scritto in […]