DEVOPS WEEKLY ISSUE #656 - 23rd July 2023

Infrastructure as Code, several posts on platform engineering, the state of APIs, SBOM adoption hurdles, tools and the upcoming Devops Days London event.

StackHawk sponsors Devops Weekly

Bridge the gap between security and development teams by sharing valuable context on common web application threats. Check out 5 common threats to address together here:
https://sthwk.com/common-web-threats

News

A big thinking post on infrastructure as code, proposing a new approach based on traits inspired by how CSS is applied to HTML.
https://nathanpeck.com/rethinking-infrastructure-as-code-from-scratch

A post looking at how to ensure platform and product teams work well together, by aligning around business metrics and using incidents as a learning opportunity.
https://firehydrant.com/blog/align-platform-and-product-engineering-teams-over-incidents/

SBOM adoption is contentious, and spans technical and policy circles. This post is looking at some of the trade body concerns and the current state of tooling.
https://dfrlab.org/2023/07/19/why-do-sbom-haters-hate/

A new report on the state of APIs, based on a survey of 40,000 developers. Adoption of AI in API development, API security, staffing, monetisation and more.
https://www.postman.com/state-of-api/

A discussion of opinionated infrastructure and platform engineering. The importance of golden paths and guardrails, and some discussion of the importance of frictionless onboarding.
https://redmonk.com/videos/opinionated-infrastructure-platform-engineering-for-productivity-golden-paths-and-guardrails/

Events

Devopsdays London is back, on September 21st - 22nd. The usual good mix of talks, lighting talks and open spaces. The organisers have kindly provided a 20% discount for readers too.
https://devopsdays.org/events/2023-london/welcome/
https://ti.to/devopsdays-london/2023/discount/DODL23_DEVOPSWEEKLY

Tools

Beet is a powerful tool for generating tests for REST APIs, based on analysing an OpenAPI specification and sample requests and responses. Interesting examples in the README.
https://github.com/isa-group/Beet

Fleek is a tool for managing local tooling in your home directory. It’s a high level interface around Nix, abstracting away the usual complexity and focusing on a specific use case.
https://getfleek.dev/
https://github.com/ublue-os/fleek