What's New with DevSecOps in IBM Cloud

New capabilities and improvements to the DevSecOps Reference Implementation.

Earlier this year, IBM introduced the DevSecOps Reference Implementation for audit-ready compliance across development teams, which provides a complete, secure software delivery lifecycle automated with IBM Cloud Continuous Delivery and other IBM Cloud services.

We’ve continued to enhance and improve this reference architecture, and today, we’re pleased to announce support for SonarQube, additional validations for image signing and new improvements to the getting-started experience. All of this will help your development teams to quickly launch a workflow that will build, scan, test and deploy your cloud-native applications, while ensuring security and compliance goals are met and evidence is retained for any future audits.

New support for SonarQube

The DevSecOps reference implementation now supports SonarQube. SonarQube is an open-source platform that helps with continuous inspection of source code quality by performing static code analysis. This helps developers keep tabs on potential bugs and code duplication, enabling them to better handle code complexity while continuously targeting hard business deadlines. More information on configuring SonarQube in the DevSecOps reference implementation can be found here:

Example DevOps Insights Quality Dashboard with SonarQube integration.

Additional image signing validations

The DevSecOps reference implementation requires developers to self-sign their container images before they can be deployed to a production environment. The new image signing step in the reference implementation now validates the input for the correct format, ensuring the Gnu Privacy Guard (GPG) key provided is correct and avoiding rework.

Improved getting-started experience

We’ve also improved the getting-started experience by adding a new IBM Cloud Dashboard tile for the DevSecOps reference implementation, highlighting new documentation that makes it easier for development teams to get started with the IBM Cloud Continuous Delivery DevSecOps templates.

Now you can find the DevSecOps docs all in one place, with a new homepage that is regularly refreshed with content that contains all you need to know to get started, including recommendations, videos, links to IBM Developer content, the IBM Architecture Center and the IBM Community, where you can discuss IBM public cloud with IT ops managers, solution architects, SREs and other cloud professionals:

New DevSecOps documentation homepage.

Get started

Tutorial with detailed steps to get started
Learn more about DevSecOps with Continuous Delivery
Learn more about IBM Cloud Continuous Delivery
If you have any questions, get help directly from the IBM Cloud development teams by joining us on Slack

Steven Weaver

Product Manager

Success and recognition of IBM offerings in G2 Summer Reports

2 min read - IBM offerings were featured in over 1,365 unique G2 reports, earning over 230 Leader badges across various categories. This recognition is important to showcase our leading products and also to provide the unbiased validation our buyers seek. According to the 2024 G2 Software Buyer Behavior Report, “When researching software, buyers are most likely to trust information from people with similar roles and challenges, and they value transparency above other factors.” With over 90 million visitors each year and hosting more than 2.6…

Manage the routing of your observability log and event data

4 min read - Comprehensive environments include many sources of observable data to be aggregated and then analyzed for infrastructure and app performance management. Connecting and aggregating the data sources to observability tools need to be flexible. Some use cases might require all data to be aggregated into one common location while others have narrowed scope. Optimizing where observability data is processed enables businesses to maximize insights while managing to cost, compliance and data residency objectives. As announced on 29 March 2024, IBM Cloud® released its next-gen observability…

Unify and share data across Netezza and watsonx.data for new generative AI applications

3 min read - In today's data and AI-driven world, organizations are generating vast amounts of data from various sources. The ability to extract value from AI initiatives relies heavily on the availability and quality of an enterprise's underlying data. In order to unlock the full potential of data for AI, organizations must be able to effectively navigate their complex IT landscapes across the hybrid cloud. At this year’s IBM Think conference in Boston, we announced the new capabilities of IBM watsonx.data, an open…