When building Docker images, we are often repeating steps. When building locally, Docker uses a cache so it doesn’t have to rebuild layers it has already built before. This is great! In CI/CD pipelines, you often start on a clean virtual machine. This means there is no Docker cache yet! Your Docker image will be […] The post Faster Docker builds using cache from Azure Container Registry appeared first on Xebia.

Introduction As Timo and Jeroen explained in their blog about bringing your Azure Devops CI/CD setup to the next level using templates to re-use your pipeline steps is a good way to accelerate your development of your CI/CD pipelines. In this short blog I want to explain how you can share your templates with other […] The post How to Share Azure Devops CI/CD Templates Across Teams appeared first on Xebia.

In today's fast-paced digital landscape, efficient collaboration and secure version control are indispensable for any software development project. With AWS CodeCommit, developers and cloud engineers are empowered with a robust and scalable solution for hosting secure Git repositories, seamlessly integrated into or close to their AWS environments. Creating a repository within AWS CodeCommit is not […] The post Create and initialise CodeCommit repositories with Terraform appeared first on Xebia.

Deploying Google Cloud (GCP) resources via Azure Pipelines used to require service account keys. Today, however, Azure DevOps OIDC tokens can be exchanged to Google credentials using Google Cloud Workload Identity Federation. This blog uses the Google Cloud Auth to do so. Azure DevOps Google Cloud Deployment Pipeline Overview The high-level deployment pipeline consists of […] The post Keyless Google Cloud deployments from Azure Pipelines appeared first on Xebia.

Deploying Google Cloud (GCP) resources via Azure Pipelines used to require service account keys. Today, however, Azure DevOps OIDC tokens can be exchanged to Google credentials using Google Cloud Workload Identity Federation. Google Cloud Workload Identity Federation External workloads can access Google Cloud resources using workload identity federation, without using a service account key. Workload […] The post How to configure Google Cloud Workload Identity Federation for Azure DevOps appeared first on Xebia.

If you’ve worked in software development for any amount of time, you’re probably used to working in a certain way, and have been in the situation where a new tool forces you to change your way of working. Some may also think that using tool X automatically means following process Y. For example, "We’re using […] The post The software delivery tool trap appeared first on Xebia.

Deploy Secure Public Web Endpoints Welcome to Building Resilient Public Networking on AWS—our comprehensive blog series on advanced networking strategies tailored for regional evacuation, failover, and robust disaster recovery. Here’s a summary of this engaging journey:  Moreover, we’ve prepared a GitHub repository to complement this blog series. It provides Infrastructure as Code (IaC) using AWS […] The post Building Resilient Public Networking on AWS: Part 2 appeared first on Xebia.

To enable CodeQL on GitHub Enterprise Server you need to make sure you have GitHub Actions setup and running, including your own set of self-hosted runners. You can read more about that in my previous post here. From that point you can get started to enable CodeQL. Of course, you'll need to have it enabled in […] The post Enabling CodeQL on GitHub Enterprise Server appeared first on Xebia.

This article is part of our XPRT Magazine #13. Read the full magazine here. I am fascinated with the security aspects of using GitHub Actions for my own workloads since I have started using them. My first conference session on this topic was at NDC London in January, 2021[1], and I have been advocating on these […] The post GitHub Actions has security issues appeared first on Xebia.

Introduction Azure DevOps pipelines are a great way to automate your CI/CD process. Most often, they are configured on a per project basis. This works fine when you have few projects. But what if you have many projects? In this blog post, we will show you how you can scale up your Azure DevOps CI/CD […] The post Scaling up: bringing your Azure Devops CI/CD setup to the next level 🚀 appeared first on Xebia.

Revisiting Networking Concepts from the Client's Perspective Welcome to our comprehensive blog series on advanced networking strategies tailored for regional evacuation, failover, and robust disaster recovery. Together, we’ll delve into a range of critical topics that are pivotal for understanding and implementing sophisticated networking solutions. Here’s what you can expect in this engaging journey:  Moreover, […] The post Building Resilient Public Networking on AWS: Part 1 appeared first on Xebia.

GitHub becoming the AI-powered developer platform Hello there 🖐️,   Broadcasting from GitHub Universe, I’m excited to share insights into the AI-infused features that GitHub has unveiled, aiming to transform it into the ultimate AI-powered developer platform.   Copilot’s new API horizon The new Copilot API empowers you to build apps that interact directly with […] The post GitHub Universe 2023 Insights appeared first on Xebia.