<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>SEI Blog | Continuous Deployment of Capability</title><link>http://www.sei.cmu.edu/feeds/tag/</link><description>Updates on changes and additions to the                         SEI Blog for posts matching Continuous Deployment of Capability</description><atom:link href="http://www.sei.cmu.edu/blog/feeds/tag/continuous-deployment-capability/atom/" rel="self"/><language>en-us</language><lastBuildDate>Wed, 05 Jul 2023 00:00:00 -0400</lastBuildDate><item><title>The Latest Work from the SEI: Rust, DevSecOps, AI, and Penetration Testing</title><link>https://www.sei.cmu.edu/blog/latest-work-sei-rust-devsecops-ai-and-penetration-testing/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>Learn more about the SEI's latest work in penetration testing, model-based design for cyber-physical systems, UEFI, and DevSecOps.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Douglas Schmidt</dc:creator><pubDate>Wed, 05 Jul 2023 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/latest-work-sei-rust-devsecops-ai-and-penetration-testing/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Continuous Deployment of Capability</category><category>Rust</category><category>Artificial Intelligence</category></item><item><title>Actionable Data from the DevSecOps Pipeline</title><link>https://www.sei.cmu.edu/blog/actionable-data-from-the-devsecops-pipeline/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>In this blog post, we explore decisions that program managers make and information they need to confidently make decisions with data from DevSecOps pipelines.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Bill Nichols, Julie Cohen</dc:creator><pubDate>Mon, 01 May 2023 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/actionable-data-from-the-devsecops-pipeline/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Agile Adoption in Government</category><category>Continuous Deployment of Capability</category><category>Measurement and Analysis</category><category>Agile</category></item><item><title>A Technical DevSecOps Adoption Framework</title><link>https://www.sei.cmu.edu/blog/a-technical-devsecops-adoption-framework/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>This blog post describes our new DevSecOps adoption framework that guides the planning and implementation of a roadmap to functional CI/CD pipeline capabilities.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Vanessa Jackson, Lyndsi Hughes</dc:creator><pubDate>Mon, 24 Oct 2022 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/a-technical-devsecops-adoption-framework/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Agile</category><category>Devops</category><category>Continuous Deployment of Capability</category></item><item><title>Release of SCAIFE System Version 2.0.0 Provides Support for Continuous-Integration (CI) Systems</title><link>https://www.sei.cmu.edu/blog/release-of-scaife-system-version-200-provides-support-for-continuous-integration-ci-systems/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>Key features in new release of SCAIFE System Version 2.0.0 including support for continuous-integration (CI) systems, and status of evolving SEI SCAIFE work</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Lori Flynn</dc:creator><pubDate>Mon, 25 Oct 2021 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/release-of-scaife-system-version-200-provides-support-for-continuous-integration-ci-systems/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Continuous Deployment of Capability</category><category>SCALE: A Static Analysis Auditing Tool</category><category>Secure Coding</category><category>Machine Learning</category><category>Static Analysis</category><category>Static Analysis Classification and Prioritization</category><category>Secure Development</category><category>Artificial Intelligence</category><category>Source Code Analysis Integrated Framework Environment (SCAIFE)</category></item><item><title>Systems Engineering and Software Engineering: Collaborating for the Smart Systems of the Future</title><link>https://www.sei.cmu.edu/blog/systems-engineering-and-software-engineering-collaborating-for-the-smart-systems-of-the-future/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>Convergence between systems engineering and software engineering is forging new practices for engineering the smart systems of the future.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Paul Nielsen</dc:creator><pubDate>Mon, 20 Sep 2021 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/systems-engineering-and-software-engineering-collaborating-for-the-smart-systems-of-the-future/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Software Architecture</category><category>Artificial Intelligence Engineering</category><category>Machine Learning</category><category>Artificial Intelligence</category><category>Systems Engineering</category><category>Devops</category><category>Data Modeling and Analytics</category><category>Digital Engineering</category><category>Model-Based Systems Engineering</category><category>Continuous Deployment of Capability</category></item><item><title>Operator-Feedback Sessions in a Government Setting: The Good and Not-So-Good Parts</title><link>https://www.sei.cmu.edu/blog/operator-feedback-sessions-in-a-government-setting-the-good-and-not-so-good-parts/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>This post covers good and not-so-good practices and outcomes in operator-feedback sessions in government environments.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Michael Szegedy, Timothy A. Chick</dc:creator><pubDate>Mon, 26 Jul 2021 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/operator-feedback-sessions-in-a-government-setting-the-good-and-not-so-good-parts/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Continuous Deployment of Capability</category><category>Requirements</category><category>User-Experience</category><category>Human-Computer Interaction</category><category>Usability</category><category>Best Practices</category><category>Agile Adoption in Government</category><category>Software Quality</category></item><item><title>Considerations for Operator-Feedback Sessions in Government Settings</title><link>https://www.sei.cmu.edu/blog/considerations-for-operator-feedback-sessions-in-government-settings/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>This post describes a design approach that considers operator feedback and effectively leverages feedback sessions.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Michael Szegedy, Timothy A. Chick</dc:creator><pubDate>Mon, 28 Jun 2021 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/considerations-for-operator-feedback-sessions-in-government-settings/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Best Practices</category><category>Agile Adoption in Government</category><category>Software Quality</category><category>Requirements</category><category>User-Experience</category><category>Human-Computer Interaction</category><category>Usability</category><category>Continuous Deployment of Capability</category></item><item><title>Evaluating the Post Assessment DevOps Posture: Eighth in a Series</title><link>https://www.sei.cmu.edu/blog/evaluating-post-assessment-devops-posture-eighth-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>In an ideal scenario, organizations that complete a DevOps assessment will implement all of the assessment's recommendations to improve their software development lifecycle (SDLC)....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">José Morales</dc:creator><pubDate>Tue, 14 Jul 2020 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/evaluating-post-assessment-devops-posture-eighth-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Devops</category><category>Continuous Deployment of Capability</category></item><item><title>Writing and Delivering the Final DevOps Assessment Report: Seventh in a Series</title><link>https://www.sei.cmu.edu/blog/writing-and-delivering-final-devops-assessment-report-seventh-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>The time has come for the final step of the DevOps Assessment: the final report. Now is your chance to document all your findings, recommendations, and related material....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">José Morales</dc:creator><pubDate>Tue, 16 Jun 2020 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/writing-and-delivering-final-devops-assessment-report-seventh-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Devops</category><category>Continuous Deployment of Capability</category></item><item><title>Reviewing Formalized DevOps Assessment Findings and Crafting Recommendations: Sixth in a Series</title><link>https://www.sei.cmu.edu/blog/reviewing-formalized-devops-assessment-findings-and-crafting-recommendations-sixth-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>Reviewing DevOps assessment findings and formalizing them into a final list is critical to precisely identifying obstacles to the client. Drafting the appropriate recommendation is key....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">José Morales</dc:creator><pubDate>Tue, 14 Apr 2020 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/reviewing-formalized-devops-assessment-findings-and-crafting-recommendations-sixth-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Devops</category><category>Continuous Deployment of Capability</category></item><item><title>Formalizing DevOps Assessment Findings and Crafting Recommendations: Fifth in a Series</title><link>https://www.sei.cmu.edu/blog/formalizing-devops-assessment-findings-and-crafting-recommendations-fifth-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>Reviewing DevOps assessment findings and formalizing them into a final list is critical to precisely identifying obstacles to the client. Drafting the appropriate recommendation is key....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">José Morales</dc:creator><pubDate>Thu, 20 Feb 2020 00:00:00 -0500</pubDate><guid>https://www.sei.cmu.edu/blog/formalizing-devops-assessment-findings-and-crafting-recommendations-fifth-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Devops</category><category>Continuous Deployment of Capability</category></item><item><title>Performing the DevOps Assessment: Fourth in a Series</title><link>https://www.sei.cmu.edu/blog/performing-the-devops-assessment-fourth-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>The overall purpose of a DevOps assessment is to help improve the software development lifecycle (SDLC). Applying DevOps in highly regulated environments (HREs) can be challenging....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">José Morales</dc:creator><pubDate>Fri, 24 Jan 2020 00:00:00 -0500</pubDate><guid>https://www.sei.cmu.edu/blog/performing-the-devops-assessment-fourth-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Devops</category><category>Continuous Deployment of Capability</category></item><item><title>Establishing the Pre-assessment DevOps Posture of an SDLC in a Highly Regulated Environment: Third in a Series</title><link>https://www.sei.cmu.edu/blog/establishing-the-pre-assessment-devops-posture-of-an-sdlc-in-a-highly-regulated-environment-third-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>This third installment in our blog series on implementing DevOps in highly regulated environments (HREs), which is based upon a recently published paper, discusses the second step in a DevOps assessment....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">José Morales</dc:creator><pubDate>Tue, 09 Apr 2019 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/establishing-the-pre-assessment-devops-posture-of-an-sdlc-in-a-highly-regulated-environment-third-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Devops</category><category>Continuous Deployment of Capability</category></item><item><title>Expectations for Implementing DevOps in a Highly Regulated Environment: Second in a Series</title><link>https://www.sei.cmu.edu/blog/expectations-for-implementing-devops-in-a-highly-regulated-environment-second-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>This second installment in the blog post series on implementing DevOps in highly regulated environments (HREs), which is excerpted from a recently published paper, discusses the first step in a DevOps assessment....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">José Morales</dc:creator><pubDate>Fri, 08 Feb 2019 00:00:00 -0500</pubDate><guid>https://www.sei.cmu.edu/blog/expectations-for-implementing-devops-in-a-highly-regulated-environment-second-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Cyber Missions</category><category>Devops</category><category>Human-Machine Interactions</category><category>Mission Assurance</category><category>Continuous Deployment of Capability</category></item><item><title>Challenges to Implementing DevOps in Highly Regulated Environments: First in a Series</title><link>https://www.sei.cmu.edu/blog/challenges-to-implementing-devops-in-highly-regulated-environments-first-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>In academia, government, and industry, DevOps has become a standard, straightforward option for streamlining efforts and increasing comprehensive participation by all stakeholders....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">José Morales</dc:creator><pubDate>Tue, 29 Jan 2019 00:00:00 -0500</pubDate><guid>https://www.sei.cmu.edu/blog/challenges-to-implementing-devops-in-highly-regulated-environments-first-in-a-series/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Continuous Deployment of Capability</category><category>Devops</category></item><item><title>Deploying the CERT Microcosm DevSecOps Pipeline using Docker-Compose and Kubernetes</title><link>https://www.sei.cmu.edu/blog/deploying-the-cert-microcosm-devsecops-pipeline-using-docker-compose-and-kubernetes/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>According to DevSecOps: Early, Everywhere, at Scale, a survey published by Sonatype, "Mature DevOps organizations are able to perform automated security analysis on each phase more often than non-DevOps organizations." ....</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Shane Ficorilli</dc:creator><pubDate>Tue, 11 Dec 2018 00:00:00 -0500</pubDate><guid>https://www.sei.cmu.edu/blog/deploying-the-cert-microcosm-devsecops-pipeline-using-docker-compose-and-kubernetes/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Devops</category><category>Software and Information Assurance</category><category>Continuous Deployment of Capability</category></item><item><title>Collecting Data, The DevOps Way</title><link>https://www.sei.cmu.edu/blog/collecting-data-the-devops-way/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>This SEI Blog post explores the importance of collecting data in a DevOps environment and highlights best practices for leveraging data-driven insights.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Kostas Kontogiannis</dc:creator><pubDate>Tue, 21 Nov 2017 00:00:00 -0500</pubDate><guid>https://www.sei.cmu.edu/blog/collecting-data-the-devops-way/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Continuous Deployment of Capability</category><category>Devops</category><category>Data Modeling and Analytics</category></item><item><title>Incremental Security Hardening the DevOps Way</title><link>https://www.sei.cmu.edu/blog/incremental-security-hardening-the-devops-way/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>Learn how to integrate security hardening into your DevOps processes to achieve incremental security improvements in this informative SEI Blog post.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Aaron Volkmann</dc:creator><pubDate>Wed, 26 Jul 2017 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/incremental-security-hardening-the-devops-way/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Continuous Deployment of Capability</category><category>Devops</category></item><item><title>Microcosm: A Secure DevOps Pipeline as Code</title><link>https://www.sei.cmu.edu/blog/microcosm-a-secure-devops-pipeline-as-code/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>Discover Microcosm, a secure DevOps pipeline-as-code tool that enables organizations to automate and secure their software development processes effectively.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Shane Ficorilli</dc:creator><pubDate>Thu, 22 Jun 2017 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/microcosm-a-secure-devops-pipeline-as-code/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Continuous Deployment of Capability</category><category>Devops</category></item><item><title>Six Remedies to Employee Resistance to DevOps</title><link>https://www.sei.cmu.edu/blog/six-remedies-to-employee-resistance-to-devops/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</link><description>Discover six strategies to overcome employee resistance to DevOps implementation in this informative SEI blog post.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Hasan Yasar</dc:creator><pubDate>Thu, 01 Jun 2017 00:00:00 -0400</pubDate><guid>https://www.sei.cmu.edu/blog/six-remedies-to-employee-resistance-to-devops/?utm_source=blog&amp;utm_medium=rss&amp;utm_campaign=my_site_updates</guid><category>Continuous Deployment of Capability</category><category>Devops</category></item></channel></rss>