This week we have a range of posts covering API specification languages, log formats and CI/CD pipelines as well as tools for building development environments and working with Terraform.

StackHawk sponsors Devops Weekly

[ICYMI] DAST is Dead! Long Live DAST! The Evolution of Dynamic API security Testing webinar is now available on YouTube. Watch on-demand here.
https://sthwk.com/long-live-dast-webinar

News

A look at the current state of API specification languages, in particular looking at TypeSpec.
https://nordicapis.com/tis-but-a-scratch-does-typespec-reignite-the-specification-wars/

A look at using VolumeSnapshots in Kubernetes to speed up pod startup time for certain types of application.
https://medium.com/riskified-technology/optimize-kubernetes-pods-startup-time-using-volumesnapshots-c0a2b7d39a29

A look at the pros and cons of using JSON for structured logs.
https://medium.com/@oakley349/the-promise-and-peril-of-json-logging-ec2d1f47cee7

A nice walkthrough of building a CI/CD pipeline using GitHub Actions, with a focus on meeting SOC 2 compliance rules.
https://mathieularose.com/gitops-cicd-github-actions

Tools

Pug is an interactive terminal application for working with Terraform. You can view the output of plans and applies, manage state resources, work on tasks in parallel and more.
https://github.com/leg100/pug

Flow is a tool for managing a local development environment. It’s powered by Nix, but provides a nice high-level interface based around the local directory.
https://github.com/flox/flox
https://flox.dev/