proomt

Search

Search posts, papers, and topics

Codeship

63 posts · blog.codeship.com

  1. Agentic coding in the enterprise: Is your pipeline ready?

    Agentic coding lets AI agents write, test, and submit code autonomously, shifting the bottleneck from writing to governing code in production. Enterprises face rising failures, unclear ownership, growing costs, and weakened controls, which require a unified pipeline visibility layer.

    Codeshipcloudbees.com6 min
  2. Migrating to Java 17: The Hows, Whys, and Whens

    A product‑focused overview of CloudBees CD/RO’s new integration with Argo Rollouts, describing the supported blue‑green and canary strategies, service‑mesh compatibility, and UI/analytics features. No deep technical walkthrough or performance data.

    Codeshipcloudbees.com6 min
  3. Every tool is green. Can you ship?

    A CloudBees blog post argues that existing CI, security, and QA tools don’t give release managers a complete view of AI‑generated code risk. It claims tool consolidation rarely helps and proposes a “control plane” (CloudBees Unify) that aggregates signals from multiple tools and adds AI‑driven test prioritization. The piece is largely promotional, with no concrete implementation details, metrics,…

    Codeshipcloudbees.com4 min
  4. Who Owns AI-Generated Code Failures?

    AI‑generated code breaks the traditional chain of ownership: developers merge PRs they didn’t write, reviewers approve logic they didn’t originate, and QA validates tests chosen by a model. A CloudBees survey shows 81% of firms see more production failures from AI code, and accountability often drifts upward to CTO/VP. The post argues role‑based accountability isn’t enough; you need end‑to‑end tr…

    Codeshipcloudbees.com4 min
  5. What is Jenkins? A Guide to CI/CD | CloudBees

    The article explains what Jenkins is—a free, open‑source CI/CD automation server that runs pipelines defined as code and can be extended via thousands of plugins. It also outlines Jenkins’ strengths, drawbacks, and how CloudBees adds enterprise‑grade security and scaling features.

    Codeshipcloudbees.com5 min
  6. The Shadow Factory: Why Your CI/CD Sprawl is About to Move Faster Than You Can Think

    The article warns that unchecked CI/CD sprawl— orphaned pipelines, hard‑coded secrets, and permissive runners— creates a hidden attack surface, and that AI‑driven agents will amplify the problem. It recommends a governance layer with real‑time inventory, policy‑as‑code, and AI guardrails to bring the software factory under the same security rigor as production.

    Codeshipcloudbees.com3 min
  7. Why Releasing Software as an Application Beats Deploying Components

    This article argues that independent microservice deployments, while seemingly fast, often lead to complex and fragile releases due to environment drift and implicit dependencies. It advocates for "application-level releasing," where a consistent, validated snapshot of interdependent components is promoted together across environments to restore predictability and stability.

    Codeshipcloudbees.com5 min
  8. Today I Learned: .gitconfig's includeIf

    Use Git's `includeIf` conditional includes to automatically load per‑directory `.gitconfig` files, letting you set different `user.email` and `signingkey` values for Apache, work, and personal repos without manual `git config` calls.

    Codeshipcloudbees.com1 min
  9. Everything is green. Nothing is ready.

    CloudBees Unify is a control‑plane layer that aggregates data from existing CI/CD, security, and release tools to give a single delivery record. It claims to improve test efficiency (98 → 30 min) and enforce governance policies across pipelines, with an AI assistant for incident triage. The post is a product‑focused webinar recap with limited technical depth.

    Codeshipcloudbees.com5 min
  10. Setting Up Jenkins EC2 Agents

    The article walks through configuring Jenkins to launch EC2 instances as build agents on demand, covering AWS IAM setup, security groups, key pairs, AMI selection, and the Jenkins EC2 plugin configuration. It shows how idle termination can keep costs low while providing elastic build capacity.

    Codeshipcloudbees.com6 min
  11. Skipping the first build on first branch indexing

    Jenkins now supports a build‑branch strategy to skip the initial build that runs when a multibranch job first indexes its branches. Install branch‑api 2.3.0+ and basic‑branch‑build‑strategies 1.3.0+, then enable **Skip initial build on first branch indexing** in the job’s Build strategies UI. The strategy works by overriding `BranchBuildStrategy.isAutomaticBuild` in the plugin code.

    Codeshipcloudbees.com2 min
  12. No, You're Not Behind. But the Stage 3 Governance Window Is Closing.

    A four‑stage model for adopting agentic AI in software delivery pipelines, warning that Stage 3 (bounded autonomous execution) is arriving faster than governance programs. The post explains the stages, required controls (scoped credentials, fail‑closed defaults, tamper‑evident logs), and uses the OpenClaw incident as a cautionary example.

    Codeshipcloudbees.com9 min
  13. FileInputStream / FileOutputStream Considered Harmful

    FileInputStream and FileOutputStream implement finalize, which forces objects onto the finalizer queue and can cause long GC pauses in programs that open many files. Switching to Files.newInputStream and Files.newOutputStream (Java 7+) eliminates the finalizer overhead and improves I/O‑heavy workloads.

    Codeshipcloudbees.com2 min
  14. What is DevOps?

    The article defines DevOps as a culture that aligns people, processes, and tools around rapid, reliable software delivery, and cites high‑profile companies that claim faster releases and happier engineers after adopting it.

    Codeshipcloudbees.com8 min
  15. Introducing AI First Responder: The Next Step in CloudBees’ AI Journey

    CloudBees announced AI First Responder (AIFR), an AI‑powered incident‑triage assistant that lives in Slack and leverages the CloudBees Unify control plane and its knowledge graph. AIFR claims to summarize logs, suggest root causes, and optionally trigger GitOps remediation, all while logging actions for governance. The feature is in limited preview and available to a design‑partner program.

    Codeshipcloudbees.com2 minrelease
  16. Why Every Enterprise Needs a DevSecOps Control Plane

    The article argues that enterprises need a DevSecOps control plane to unify fragmented CI/CD tools, enforce security policies, and provide AI‑aware context. CloudBees Unify is presented as a solution that claims large reductions in release prep time and outages without requiring tool migration.

    Codeshipcloudbees.com6 min
  17. The Flaky Test Confession: “We All Know We’re Ignoring Test Failures”

    Flaky tests silently erode CI reliability, waste compute and developer time, and let real bugs slip into production. The post quantifies the cost (≈2.5 % of developer time, $5.67 per manual investigation vs $0.02 for auto‑rerun) and critiques common band‑aid approaches (retries, quarantine, manual triage). It argues that visibility—detecting flaky tests, predictive test selection, and automated t…

    Codeshipcloudbees.com5 min
  18. A Note from CloudBees’ New CEO

    CEO Moritz Plassnig’s note is a high‑level, marketing‑focused announcement about CloudBees’ vision for AI‑augmented software delivery. It contains no technical details, code, or concrete product changes—just broad statements about flexibility, governance, and future “industrialization” of development.

    Codeshipcloudbees.com3 min
  19. What Continuous Security Is and What It Isn’t

    The article defines continuous security as an AI‑augmented, unified control plane that embeds security checks into CI/CD pipelines, contrasting it with fragmented tool sprawl that creates alert fatigue. It promotes CloudBees Unify as a solution that deduplicates findings, enforces policy‑as‑code, and automates audit evidence.

    Codeshipcloudbees.com4 min
  20. Blog: How to Build a DevOps Agent

    This blog walks through the open‑source DevOps Agent Kit, which lets Claude Code or Cursor act as a DevOps assistant by connecting to CloudBees Unify, Jira, and Slack via MCP servers and to GitHub via the CLI. It provides a repeatable setup (Docker, Node, env file) and seven slash commands for pipeline overview, triage, security, release readiness, flag management, CI health scoring, and Jira tic…

    Codeshipcloudbees.com10 min
  21. Run Jenkins as a Service with Private SaaS Edition

    A marketing announcement for CloudBees' new Private SaaS Edition, a managed Jenkins‑as‑a‑Service offering that runs on private or virtual private clouds using Docker, Mesos, OpenStack or EC2. No technical details, architecture diagrams, or implementation guidance are provided.

    Codeshipcloudbees.com1 minrelease
  22. Introducing ElectricCommander 4.2

    ElectricCommander 4.2 adds a redesigned Resources UI, bulk agent install/upgrade, optional trusted SSL connections, zone‑based segmentation with gateways, new API commands, JSON transport, and a bundled standard license. The release is a typical product update with no deep technical analysis.

    Codeshipcloudbees.com3 minrelease
  23. Copying Artifacts Between Builds in a Jenkins Workflow

    The copyartifact plugin now supports Jenkins Pipeline via a core step (v1.34). Use the generic `step([$class: 'CopyArtifact', …])` syntax to pull artifacts from another job, with all existing options available through the Snippet Generator. A native pipeline step is planned.

    Codeshipcloudbees.com1 min