<p class="wp-block-paragraph">Ok, but as developer, does really matter that Mythos apocalyptic alarm? Is there an intelligent SAST?</p> <p class="wp-block-paragraph">Yes, the intelligent SAST version you are looking for exists and is native to the Semgrep ecosystem. It is called <strong>Semgrep Assistant</strong>, which runs on top of the <a href="https://semgrep.dev/docs/deployment/add-semgrep-to-ci">Semgrep AppSec Platform</a>. Recently, Semgrep also introduced <strong>Semgrep […]
Tag: jenkins
Automate it when it matters
<p class="wp-block-paragraph">Back to 2017, <a href="https://starsellersword.com/" data-type="link" data-id="https://starsellersword.com/" target="_blank" rel="noopener">Starsellersworld</a> want to develop a new tool for people working in the seller’s store and dealing with shipments directed to customers.</p> <p class="wp-block-paragraph">One of the key work behind every online sellers is to pack and ship the package to the customer, as soon as the order […]
My latest LLM code nightmare
<p class="wp-block-paragraph">Customer needs to automate code statical analysis into the integration workflow using a SAST tool.</p> <p class="wp-block-paragraph">The detailed task specification comes from ChatGPT, suggesting semgrep ran from a docker image <a href="https://hub.docker.com/r/semgrep/semgrep" target="_blank" rel="noopener" title="">semgrep/semgrep</a>.</p> <p class="wp-block-paragraph">I thought it wasn’t a bad idea. ChatGPT suggested to integrate the tool as a pre-commit git hook, […]
The tale of Jenkins update to Java Jdk21 and Matrix Auth plugin
<p class="wp-block-paragraph">I passed a long day dealing with Jenkins runtime update (from jdk17 to jdk21), and authorisation plugin (Matrix Auth) stopping to work. Here is the tale.</p> <p class="wp-block-paragraph">Involved system:</p> <p class="wp-block-paragraph">Error log messages was related to hudson, and to matrix, and to authorization:</p> <pre class="wp-block-preformatted">Caused: jenkins.util.xstream.CriticalXStreamException: <br>[LF]> —- Debugging information —-<br>[LF]> cause-exception : com.thoughtworks.xstream.mapper.CannotResolveClassException<br>[LF]> […]
System topology of CI/CD Jenkins talking with Docker registry
<p class="wp-block-paragraph">Nowaday Docker Swarm is an entry level project, used just for study purpose.</p> <p class="wp-block-paragraph">But really there was a time when it was competing with Kubernetes, just because it is simpler, easy to setup and maintain, and with a quick learning curve.</p> <p class="wp-block-paragraph">These aspect make Docker Swarm ideal for starting to thinking about […]
Dive into (useless?) uncovered case of multistage dockerfile
<p class="wp-block-paragraph">Looking at the upstream documentation of <a href="https://docs.docker.com/build/building/multi-stage/">Multi-stage builds</a> there are some examples but this is missing:</p> <p class="wp-block-paragraph">Ok, I mean, the example by itself is useless, but “it works”. Try:</p> <p class="wp-block-paragraph"><code>docker build -f Dockerfile -t copiedfrom-rust:v0.1 .</code></p> <p class="wp-block-paragraph">Then:</p> <p class="wp-block-paragraph"><code>docker run -it copiedfrom-rust:v0.1 sh</code></p> <h2 class="wp-block-heading">Real use case scenario</h2> <p class="wp-block-paragraph">Lets […]
My 2 days Journey on moving services to a swarm
<p class="wp-block-paragraph">I work for starsellersworld.com, I wanted my company start to use tool for tracking project development in a centralized way, Jira was expensive as resource, and I can not ask such a step, so I asked a machine were to run <strong>Redmine</strong>. Then it cames the <strong>gogs</strong>, and, after little time, <strong>Jenkins</strong>.</p> <p class="wp-block-paragraph">A […]
git-merge: the github conference (Microsoft 2019)
<p class="wp-block-paragraph">Remembering those nice days in Brussels, where I visit le Grand Platz, having good lamb’s meals, visiting <a href="https://vangoghexpo.com/" data-type="link" data-id="https://vangoghexpo.com/" target="_blank" rel="noreferrer noopener">Van Gongh – The immersive experience</a>, <a href="https://g.co/kgs/RL2pGkj" data-type="link" data-id="https://g.co/kgs/RL2pGkj">Atomium</a> (<a href="https://youtu.be/w3X94d9wVlw" data-type="link" data-id="https://youtu.be/w3X94d9wVlw" target="_blank" rel="noreferrer noopener">my video</a>). But mostly I attended the conference on github, updating my skills on managing […]
Lo sporco lavoro del CI/CD e DevOps
<p class="wp-block-paragraph">Ora racconto una storia. Beh, la faccio breve, si è fatta una certa.</p> <p class="wp-block-paragraph"> </p> <p class="wp-block-paragraph">Da quando c’è bisogno di rilasciare il software in tempo reale sono stati scritti diversi software di supporto <span style="font-size: 13.008px;">per fare lo sporco lavoro di: eseguire test, impacchettare, distribuire i pacchetti nei vari server di destinazioni.</span></p> <p class="wp-block-paragraph"><span […]