An open guide to evaluating software composition analysis tools

By

-

November 2, 2020

Overview

With the help of software composition analysis (SCA) tools, software development teams can track and analyze any open source code brought into a project from a licensing compliance and security vulnerabilities perspective. Such tools discover open source code (at various levels of details and capabilities), their direct and indirect dependencies, licenses in effect, and the presence of any known security vulnerabilities and potential exploits. Several companies provide SCA suites, open source tools, and related services driven as community projects. The question of what tool is most suitable for a specific usage model and environment always comes up. It is difficult to answer given the lack of a standard method to compare and evaluate such tools.

The goal of this paper is to recommend a series of comparative metrics when evaluating multiple SCA tools.

Download Whitepaper

The post An open guide to evaluating software composition analysis tools appeared first on The Linux Foundation.

How to Build a Highly Qualified Cloud-Native Team

By

Linux.com Editorial Staff

-

November 2, 2020

If you’re reading this, you more than likely are aware of the struggles involved in recruiting and building a team of technical professionals skilled in cloud-native computing technologies such as Kubernetes, Helm, Prometheus, and service mesh. The Linux Foundation and edX’s “2020 Open Source Jobs Report” found 93% of hiring managers are having difficulties filling open positions that require open source skills like these. The report also found that cloud and container technologies are the most in-demand aside from Linux, which itself is a necessary basic skill for cloud professionals.

So the question is, between a talent shortage and rapidly increasing adoption of these technologies, how can any leader manage to build out a qualified team? Based on our experiences as a vendor-neutral provider of training and certification for many of these technologies, we’ve learned some tips and tricks that, with some effort, can help you establish a team that can handle any cloud-native project you throw at them.

Linux and open source jobs are in high demand

By

Linux.com Editorial Staff

-

November 2, 2020

Linux and open-source jobs are hotter than ever

The Linux Foundation and edX, the leading online course company, released the 2020 Open Source Jobs Report on October 26. Once again, despite the COVID-19 pandemic, the demand for open-source technology skills is growing. 37% of hiring managers say they will hire more IT professionals in the next six months.

How to interpret captured Wireshark information

By

-

October 31, 2020

Learn to capture and interpret network information with Wireshark.
Read More at Enable Sysadmin

How to use Ansible to configure Vim

By

-

October 31, 2020

Using this playbook, you can quickly deploy and update your Vim configuration using Infrastructure as Code principles.
Read More at Enable Sysadmin

An introduction to Prometheus metrics and performance monitoring

By

-

October 31, 2020

Use Prometheus to gather metrics into usable, actionable entries, giving you the data you need to manage alerts and performance information in your environment.
Read More at Enable Sysadmin

DNF for APT users

By

Jason Perlow

-

October 29, 2020

DNF for APT users

Take a look at a few common and useful DNF and APT operations.
Jonathan Roemer
Thu, 10/29/2020 at 5:38am

Image

Photo by Josh Sorenson from Pexels

When hopping between Linux distributions, it can be challenging to smoothly transition between the different interfaces to package management tools. In this article, we’re going to review some common operations and how to perform them using both dnf and apt.

Topics:
Linux
Linux Administration
Package Management
Read More at Enable Sysadmin

How to use the Linux mtr command

By

-

October 28, 2020

mtr is an essential, real-time network diagnostic tool for your sysadmin toolbox.
Read More at Enable Sysadmin

Sysadmin tales: Take a look back at an old school IT prank

By

-

October 28, 2020

Sysadmin tales: Take a look back at an old school IT prank

In the Age of IT Innocence, things and practical jokes were much simpler. Take five minutes to kick it “old school” with this stone age prank.
Rick Greene
Wed, 10/28/2020 at 3:13am

Image

“Apple IIe, Living Computer Museum & Labs, Seattle” by mattk1979 is licensed under CC BY-SA 2.0

Set your Wayback Machine to the early ’80s. Disco was dead and gone, pop rock was making waves, and consumer computers were available enough that some schools started figuring out that teaching computers was something they should do.

My school was one of those—the lovely Manheim Township High School in Neffsville, PA. A classroom was repurposed as a computer lab, as the prior computer area was barely larger than a closet and only had four terminals connected to some type of “miniframe” computer, with one Apple II computer on a rolling cart.

Topics:
Linux
Hardware
Read More at Enable Sysadmin

The accidental forkbomb: How a *nix script goes bad

By

-

October 28, 2020

When brilliant strategies go wrong, they can really go wrong and your opponent has to come to your rescue.
Read More at Enable Sysadmin