Send us a text In this episode of DevOps Sauna, Marc and Darren discuss the latest stories in DevSecOps, including using AI for automating governance and an increased focus on companies using RAG models to help leverage internal documentation to streamline DevSecOps tasks. Marc and Darren also highlight other developments, including IBM acquiring H…

Send us a text In this episode, Darren and Marc are joined by Dan Grøndahl and Emma Dahl-Jeppesen. Emma and Dan advocate for a product-driven approach to platform engineering, with clear boundaries and purpose to prevent team burnout—a shift from traditional, sometimes ambiguous DevOps roles. They humorously explore “10 things we hate about platfor…

Send us a text This episode delves into the key topics surrounding security, SBOMs (Software Bill of Materials), AI, and the seamless integration of security tools into DevOps. Priyanka Syal emphasizes the importance of transparency in both software and training data, especially as AI introduces new challenges around ethics and security. Darren add…

Send us a text In this episode, Marc and Darren chat with Charity Majors, co-founder and CTO of Honeycomb. They explore how Charity balances a public role in tech, her thoughts on leadership, and the importance of building diverse, inclusive teams. Charity opens up about her journey with Honeycomb, her personal life, and why she values hiring junio…

Send us a text In this episode of DevOps Sauna, Marc and Darren are joined by Dan Khurram to discuss a white paper that originated from a collaborative workshop focused on AI scenarios. The workshop, which involved various experts, explores the potential impacts of AI on businesses. The conversation delves into the process behind creating the white…

Send us a text In this episode of DevOps Sauna, Marc and Darren discuss the recent arrest of Telegram founder Pavel Durov by French authorities over allegations of failing to moderate criminal activities on the platform. They explore the complexities of Telegram's encryption practices, noting that while the platform claims to offer secure communica…

Send us a text Helen Beal, a renowned expert in DevOps and Value Stream Management (VSM), steps into the sauna with Marc and Darren to discuss the significance of experimentation in production environments and the role of leadership in driving successful DevOps transformations. Helen also explores the evolution and importance of Value Stream Manage…

Send us a text Marc and Darren discuss the recent CrowdStrike root cause analysis (RCA) following a significant incident where an update to their Falcon sensor caused around 8 million Windows computers to crash. The incident was traced back to an error in the software update that expected 20 inputs but received 21, leading to widespread blue screen…

Send us a text In this season finale, Marc and Darren take a reflective journey through the most compelling episodes of late, encapsulating key themes in DevOps, AI, and security while reflecting on the insights shared by notable guests such as Amanda Brock and Cheryl Hung. They revisit key discussions on topics such as the challenges of AI in infr…

Send us a text In this episode of DevOps Sauna season 4, Darren and Marc delve into key DevOps and security updates, focusing on GitHub's potential new standard for SBOMs and its collaboration with JFrog. They joke about their reliance on ChatGPT, given its recent outage, and discuss the concerning frequency of cyber attacks, referencing significan…

Send us a text Dan Plumbley, Eficode's first GitLab champion, joins hosts Marc and Darren for an episode exploring GitLab. The discussion highlights GitLab's holistic approach, incorporating project management, CICD pipelines, and security features within a single platform. Dan covers the integration of open-source tools that provide a seamless use…

Send us a text In this episode, Marc's anecdote about resolving a stuck bike axle underscores the importance of having diverse tools and approaches when tackling problems—a principle that extends to security where relying solely on one method can lead to vulnerabilities. Exploring the value of diverse strategies, redundancy, and rapid feedback loop…

Send us a text In this episode, Marc and Darren are joined by Sven Peters, Developer Advocate at Atlassian, discussing enhancing developer joy and productivity. Sven emphasizes that developers often understand their own problems, and management should listen to them. He discusses the increased cognitive load from responsibilities like observability…

Send us a text In this episode, Marc and Darren are joined by colleagues Henri and Kalle to discuss the proactive role of DevOps in integrating AI into organizations. They emphasize the importance of robust security measures to manage risks and highlight the benefits and challenges of using AI, particularly large language models (LLMs), for apps li…

Send us a text Darren and Marc discuss the EU AI Act, the world's first regulation on artificial intelligence development. The Act, aimed at controlling and putting guardrails on AI development, is seen as a step towards addressing potential risks associated with AI, such as manipulation, bias, and exploitation. While acknowledging the Act's spirit…

Send us a text In this episode of DevOps Sauna, Marc and Darren are joined by Eficode UX and Accessibility Lead Annika, who emphasizes the importance of considering accessibility requirements and various user needs from the outset of any project. She shares her journey into accessibility work, highlighting its significance and intersection with use…

Send us a text Marc and Darren discuss various topics, including the implications of edge computing on DevOps, the emergence of AI-generated code, controversies surrounding open-source licenses, the rise of start-ups focused on automating DevOps tasks, the widespread use of AI among developers, and the need for responsible innovation with Generativ…

Send us a text In this episode, Marc and Darren host Cheryl Hung, Senior Director of Infrastructure Ecosystem at Arm and founder of Cloud Native London. They discuss Arm's expanding role beyond mobile devices into data centers and infrastructure, highlighting increased software support for Arm processors. The conversation touches on trends like Git…

Send us a text In this episode of the DevOps Sauna podcast, Amanda Brock, CEO of OpenUK, explores the impact of AI-generated code on open source software. She addresses licensing complexities, ownership issues, and maintainer responsibilities. The discussion also covers the misuse of open source in AI contexts and concerns about regulations like th…

Send us a text Darren and Marc discuss the concept of repatriation in DevOps in this episode of DevOps Sauna, advocating for a return to manual deployment and bare metal servers. They discuss the importance of treating servers like pets rather than cattle, emphasizing hands-on care and control over automated processes. They also touch on topics suc…

Send us a text In this episode, Marc and Darren explore stress in IT, covering the signs, types, and management strategies. They share personal experiences and offer practical tools like the three and four-panel methods for addressing stress-inducing situations. They advocate for seeking professional help, breaking the stigma around mental health c…

Send us a text In this episode, Marc and Darren discuss the feasibility and implications of creating a fully open source toolchain for software development. They explore various aspects of the toolchain, including version control, compliance, secure storage, documentation, task management, and more. Specific tools and their suitability for differen…

Send us a text This episode explores the concept of value stream mapping, emphasizing transparency, prioritization, and continuous improvement to optimize value creation within organizations. Through discussions on feedback loops and breaking down silos, Marc and Darren empower listeners with insights to enhance their software development processes…

Send us a text Darren and Marc discuss incident response in cybersecurity in this episode, with a focus on the importance of disconnecting rather than shutting down during security incidents. They cover the four phases of incident response: Discovery, analysis, action, and postmortem, highlighting the shift in cybersecurity from prevention to effec…

Send us a text Marc and Darren address the resistance to change within organizations when it comes to adopting new technology. They cover the challenges of traditional command and control hierarchies in modern workplaces, emphasizing the importance of involving knowledge workers in the change process for successful adoption. Also highlighted is the…

Send us a text In this podcast episode, Marc and Darren discuss platform engineering, with a focus on how to start building an effective platform from scratch in 2024. They emphasize the importance of erasing past mistakes, standardizing tooling, and gaining management buy-in. Marc and Darren advocate a balanced approach that prioritizes getting so…

Send us a text Darren and Marc highlight the importance of going all in on a platform transformation, emphasizing the need for commitment and investment. They discuss the shift towards internal developer platforms and the challenges of overcoming ill-defined areas in platform engineering. The conversation touches on common pitfalls, including the d…

Send us a text Marc and Darren are joined by Andrew Martin, founder and CEO of control-plane.io, to discuss the challenges of securing Kubernetes for different user levels and the evolution of security practices in DevOps. They emphasize collaboration between development and security teams and the importance of tools like OSCAL for automating secur…

Send us a text In this episode, Marc and Andy are joined by the VP of Engineering at Showpad, Patrick Debois. They discuss GenAI and the metaverse, emphasizing their significance in the industry. Patrick reflects on his famous quote about DevOps breaking silos and how the industry has evolved from large to smaller, more collaborative teams. They de…

Send us a text In this episode, Andy, Marc, and Pinja discuss their experiences at The DEVOPS Conference Scandinavia 2023. They highlight several key themes and speakers from the event, including transformations, AI, Developer Experience (DX), and platform engineering. Some notable speakers mentioned include those from Saxo Bank, Adobe, HSBC, Spoti…

Send us a text Marc and Andy discuss initiatives related to open source in the context of AI with Amanda Brock, who highlights the importance of open source as a means of transparency and accountability, allowing people to inspect and understand the code they use. They also touch on topics like investing in open source as a way to support the globa…

Send us a text David Keane shares insight with Marc and Andy into the challenges of implementing DevOps at scale in HSBC. Learn about the positive impact of DevOps on cost control and security for gaining buy-in, along with the importance of breaking down silos, promoting collaboration, and fostering a culture of accountability. David also tells of…

Send us a text David and Ronnie from WirelessCar join Marc and Andy in the DevOps Sauna, focusing on helping teams with DevOps and team development. In a thought-leadership experiment, David and Ronnie stress the importance of involving the whole team when someone takes the initiative to solve a problem. They also discuss the DevOps Health Radar fr…

Send us a text Marc and Andy are joined by Cisco Senior Developer Advocate Adrienne Tacke. They discuss her upcoming talk on code reviews and more at The DEVOPS Conference in Scandinavia. Also covered: The challenges of measuring developer productivity using DevOps Research and Assessment (DORA) metrics Code reviews, team dynamics, and the potentia…

Send us a text In this pregame podcast for the DEVOPS Conference Scandinavia, Marc introduces special guest Pinja Kujala. Along with Andy, they discuss the upcoming DEVOPS Conference Live, scheduled for October 23rd and 25th, 2023, in Stockholm and Copenhagen. Get the lowdown on keynote speakers and their topics, from the practical use of AI in sof…

Send us a text There's a connection between software development and cooking in that both require a certain level of creativity and experimentation. Juan Pablo Buriticá uses culinary analogies to explain software development principles and shares best practices for team success with Marc and Andy. The DevOps Conference: https://hubs.li/Q021CcMw0…

Send us a text When considering platform engineering. GitLab is a one-stop tool solution for maintaining your backlog, building the code, writing and building the code, collaborating, and deploying into production, but it also has built-in security features. What is the role of a Solutions Architect from the GitLab side? We invited one (Péter Bozs…

Send us a text There's something really special about the people behind open source and how they get involved. We've been talking to some of them this summer, and in this episode, we're chatting with Dr. Dawn Foster, from CHAOSS Project and board member of OpenUK.-Join us at The DEVOPS Conference in Stockholm and Copenhagen In October 2023: https:/…

Send us a text We've been talking about open source quite a bit lately. Loft Labs launched a brand new project called DevPod, built to help you spin up a dev environment wherever you want. Lian Li, Developer Advocate at Loft Labs, is here to help us find out more about it. -Cloud native development training: https://hubs.li/Q01W_4S00 -Previous epis…

Send us a text We've had previous conversations with Liz Rice in the DevOps Sauna podcast before and hosted her eBPF talk at The DEVOPS Conference Global 2023. It seems that many people don't know much about the work that Isovalent is doing and eBPF in general, although they are huge worldwide. Bill Mulligan, the Community Pollinator of Isovalent, …

Send us a text Since early 2023, everyone has been scrambling around AI, although there have been discussions around it even before ChatGPT and GPT models came out. What's going on with AI in the world today? Is this a hype cycle? Is this something real? Jaakko Vainio, COO of Silo AI, is here to discuss this with us, as he's been in the game for a …

Send us a text Will AI destroy open source because it will end up in the hands of a few companies that can afford it? Amanda Brock, CEO of Open UK - the UK organization for the business of open technology - is excited about working out how open source will survive as this mainstream thing and continue to be the bulk of our infrastructure so that it…

Send us a text "Good software is built by happy, well-supported people", Rust Foundations, an independent non-profit organization dedicated to stewarding the Rust programming language. Most open-source software developers are paid professionals, usually working in corporations or enterprises, but they may be working anywhere. And it may or may not …

Send us a text How do you know what you're using in the open source field is legitimate? More and more people are moving to using open source tools and they don't question whether the Grafana open source or any monitoring solutions that are open source, because they're so widely used by so many companies. And that collective knowledge and collectiv…

Send us a text Jason Walker joins us in this episode to discuss the platform engineering work he's been doing with American Airlines, which is becoming one of the most state-of-the-art shops. How did this project get started? How did it ramp up, considering some typical large organization software pathologies?-Get a unique snapshot view of platform…

Send us a text This is a DevOps Sauna field day episode, Marc and Andy talk about what they learned about Copilot X Chat, as they review their recent webinar with James Garcia from Github.-The webinar "AI-driven development: exploring GitHub Copilot" will soon be available athttps://hubs.li/Q01R8K-S0…

Send us a text "We should design platforms that make simple things simple and hard things possible.”, Alan Kay, computer scientist. For Kaspar Von Grünberg, founder and CEO of Humanitec and our guest for this episode, this summarizes the key thing in platform engineering, which is how can you design paths, and pathways that are respectful towards e…

Send us a text A couple of weeks ago, some members of our Eficode team attended KubeCon + CloudNativeCon Europe 2023 in Amsterdam, the event that gathers adopters and technologists from leading open source and cloud native communities. Andy Allred even took the stage together with Liz RiceEnjoy some key takeaways from The Cloud Native Computing Fou…

Send us a text Our mantra in DevOps since the beginning has been: "everything is code" But how do we keep track of what's happening in our development pipeline, the builds, the tests, the commits, the security scans? Is there such a thing as a black box for software or DevOps? We invited Mike Long, CEO at Kosli, a startup making an impact in DevOps…

Send us a text Breaking news on software security guidelines from The White House, analysis and reporting from The DevOps Sauna PodcastThe Biden administration announced a new, historic National Cybersecurity Strategy calling for cybersecurity liability and increased investment.Our podcast hosts, Marc and Andy discuss the topic with Darren Richards…