{"id":552,"date":"2021-03-17T23:42:39","date_gmt":"2021-03-17T23:42:39","guid":{"rendered":"https:\/\/vernonkeenan.com\/?p=552"},"modified":"2021-05-31T09:00:47","modified_gmt":"2021-05-31T16:00:47","slug":"copado-acquires-new-context-for-devsecops","status":"publish","type":"post","link":"https:\/\/salesforcedevops.net\/index.php\/2021\/03\/17\/copado-acquires-new-context-for-devsecops\/","title":{"rendered":"Copado Acquires New Context for DevSecOps"},"content":{"rendered":"\n

Chicago-based Copado<\/a>, who is a leader in Salesforce<\/a> devops solutions, today announced they acquired San Francisco-based security company New Context<\/a> for undisclosed terms. Please read the full blog posting here<\/a>. <\/p>\n\n\n\n

Copado says they are using the comprehensive security services and expertise at New Context to bolster their Salesforce devops suite of products and services.<\/p>\n\n\n\n

DevSecOps Gains Visibility After SolarWinds<\/h2>\n\n\n\n

Why make a big DevSecOps move? The one word answer is SolarWinds. The SolarWinds hack happened through infiltration of bad actors into the SolarWinds devops engineering process. The actors changed code in source code repositories, enabling a hacked artifact to be distributed to 10’s of thousands of SolarWinds customers.<\/p>\n\n\n\n

Compromised artifacts “phoned home” to a command and control server and then waited for further instructions. The bad actors waited for interesting enterprises to check in, such as those from a governmental agency. The bad actors then go on to execute further infiltration tactics at those sites. But, it is important to remember that a foreign power could <\/em>have impacted all of the thousands of sites they had infiltrated.<\/p>\n\n\n\n

What is DevSecOps?<\/h2>\n\n\n\n

While security is vital, of course, let us hope that the term DevSecOps doesn’t survive much longer. Because DevSecOps merely describes the process of using systematic security precautions during the devops engineering process. Security should be a core concern, never an afterthought. Here are some of these security practices, as outlined on the New Context web site:<\/p>\n\n\n\n