Universal Package Manager & Private Docker Registry, CI/CD platform that automates builds and deployments, and Servers Configuration Manager.
Berea, OH
Joined October 2010
- Tweets3.8K
- Following395
- Followers1.4K
- Likes3.1K
Inedo retweeted
Join @Inedo for an exciting webinar to discover:
🍫 What Chocolatey is
💼 How to best leverage Chocolatey in your org
🔀 How Chocolatey can transform your software management process
Register for Nov 20 or 21: bit.ly/3Ze43gT
Inedo retweeted
BuildMaster provides a centralized platform for managing release pipelines, orchestrating deployments, and coordinating application configurations. startupstash.com/tools/build…
Inedo retweeted
Hey folks, I'm attending powershellsaturdaync.com/ as a speaker October 5th and 6th. On Saturday we're talking Callstacks in PowerShell for 45 minutes. Sunday, I'm teaching a ~4.5 hour master class on @chocolateynuget packaging techniques. Tickets on sales now for $125!!
Inedo retweeted
🍫 Fact of the Month: Chocolatey integrates with several infrastructure automation tools, including including: @ansible, @chef, @octopusdeploy, Otter by @inedo, PowerShell, @puppetize, @MSintune, and more! docs.chocolatey.org/en-us/fe…
Inedo retweeted
😩 Managing software across your organization can be a challenge... but it doesn't have to be!
🙌 With Chocolatey for Business, you can gain access to powerful tools designed to automate your entire Windows software lifecycle.
Inedo retweeted
Jfrog Artifactory Flaw Let Attackers Poison Artifact Caches cybersecuritynews.com/jfrog-… #Cybersecurity #Cybercrime
Inedo retweeted
Getting Started with BuildMaster: Creating an ASP.NET CI/CD Application youtu.be/Byi7gnOn6Hc?si=Y_m8… via @YouTube
Inedo retweeted
What are you using to manage your container images? I'm looking for alternatives to Artifactory, because @jfrog apparently refuses to get me a support account, let alone allow me to create support tickets, even though I'm a paying customer.
Inedo retweeted
myget.org is a good example of the service you can expect when a Private Equity firm acquires your business, frequent downtime until eventually the whole site goes down, taking down all projects CI builds that depend on it
Inedo retweeted
We're using Inedo ProGet (free edition) for most of this; we only publish it internally so we don't require credentials for install-module but the rest is in use
Inedo retweeted
gplv3 is a big problem in todays world of pip / npm / gems.
many programmers end up being ducktapers, and never thought that a single small package, where they use maybe 2 functions and some classes, end up making their entire project, a derived work.
Inedo retweeted
😩 Pypi literally had to stop accepting new users and new projects because of malicious shenanigans!
Supply-Chain Attacks are devastating. Particularly because it has a "well-tainting" effect. Imagine someone adding poison to the water supply? That's basically supply-chain attacks.
And several orgs that I speak to don't have a clue about how they can address it. Worse, their pentesters/red-teamers themselves find the area a complete black-box (no pun intended)
And mind you, supply-chains go far beyond just your application's libraries. It includes, but not limited to:
1. CI tooling
2. Developer tooling and envs
3. Cloud
4. Kubernetes
5. Containers
6. Container Registries
and much more.
Which is why I wrote "Attacking the Application Supply-Chain". This was a 4.8/5 training @BlackHatEvents #BHUSA last year and its back again this year.
If you want 2 days of epic pwnage of Application Supply-Chains and get long-term access to all the amazing @AppSecEngineer labs, then you should register now, before prices go up May 26!
Course video in the message in the replies
Register:
* Aug 5-6: blackhat.com/us-23/training/…
* Aug 7-8: blackhat.com/us-23/training/…
Inedo retweeted
Nice blog post on #Python package versioning. Get on the same page with your community/company.
5 Best Practices for Versioning Your Python Packages blog.inedo.com/python-best-p…
Inedo retweeted
Dude, you should put up a warning that any "input" steps in a Jenkins pipeline is a surefire way to make EVERYONE unhappy, that you should NEVER do it.
Because otherwise I think you're being fair. But fuck input. It's horrible.
Inedo retweeted
Is there a PowerShell plugin for Jenkins? Or can Jenkins run PowerShell as an external job in a pipeline? Of course!
plugins.jenkins.io/powershel…
blog.inedo.com/jenkins/run-p…
Not sure what "Jenkins" is?
4sysops.com/archives/getting…
#SEC505 #PowerShell #Jenkins #CICD #DevOps #DevSecOps
Inedo retweeted
Docker Image Promotion is the process of promoting Docker Images between registries to ensure that only approved and verified images are used in the right environments, such as production. docs.inedo.com/docs/proget-d…