01 - SDLC, CICDCT and GitOps | Jenkins 2022

01 - SDLC, CICDCT and GitOps | Jenkins 2022
#DevOps #Cloud #Programming
▬▬▬▬▬▬ T I M E S T A M P S ⏰ ▬▬▬▬▬▬
0:00 - Start
▬▬▬▬▬▬ GitHub Links 🚀 ▬▬▬▬▬▬
► github.com/kunchalavikram1427...
▬▬▬▬▬▬ Pre-Requisite ▬▬▬▬▬▬
💡 Docker ► • Docker - 01: Introduct...
▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
Kubernetes course ► • Kubernetes Made Easy
Docker course ► • Docker - 01: Introduct...
▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
Whatsapp Only ► [phone]
Email ► [e-mail]
Facebook group ► / 171043094400359
Telegram group ► t.me/devopsmadeeasy
LinkedIn ► www.linkedin.com/in/vikrambabuk
🙏 🙏 🙏 Kindly Like and Subscribe our KZbin Channel for more videos 🙏 🙏 🙏
I also post important updates on Docker, Kubernetes, Helm, Git, Python, Jenkins, Ansible, Terraform on my Facebook Page
that are helpful in clearing many certifications😍😍
Help me build more tutorials like this by contributing. Reach out to us on my Email address provided above🙏
If you like this video, kindly like ✅, share 🔁 ,subscribe and hit that 🔔 icon
⭐ Tags ⭐
- DevOps Made Easy
- Docker Made Easy
- Kubernetes Made Easy
- Helm Made Easy
- Istio Made Easy
- Ansible Made Easy
- Terraform made Easy
- Python Made Easy
- Git Made Easy
- Python Tutorials
- Object-Oriented Programming Python
- Python OOP
- Python Objects and Classes
- Classes Python
- GoLang Tutorials
- Objects and Classes Python
⭐ Hashtags ⭐
#Docker #Kubernetes #Jenkins #CICD #Cloud #Helm #Ansible #GitOps #AWS #Azure #GCP
#Rancher #IoT #Python #Go #Terraform

[@SumitKumar-uq3dg]

One question Vikram. When do we actually do the static code analysis using sonarqube? I have usually seen people saying that we do it after the maven build. But what's the point after build? If we do it before build then it makes sense rt. Please correct me

[@DevOpsMadeEasy]

Static code analysis as the name itself indicates its static. So it should be performed on the actual source code to find known vulnerabilities and to check if the coding standards meet the guidelines such as MISRA. We perform this before the actual build process as the artifact generated out of the build process is not involved in the static/source code analysis. Furthermore if you are interested in Dynamic code analysis, you should generate the artifact and run it to perform analysis on the running program.

[@SumitKumar-uq3dg]

@@DevOpsMadeEasy exactly. Now the dynamic analysis would mean DevSecOps way rt!

[@DevOpsMadeEasy]

We do code analysis to check if the code meets production standards. Checks like if your test suite covers the whole source code (code coverage), known vulnerabilities, improper usage of variables, using public classes instead of private, definitely variables but not using them, known memory leaks, writing functions that exceeds standard lines of code etc are known as bad coding practices. We use source code scanners to detect all these

[@DevOpsMadeEasy]

www.oracle.com/java/technologies/javase/codeconventions-contents.html

[@SumitKumar-uq3dg]

@@DevOpsMadeEasy thnks a lot Vikram. I love watching your videos. Thanks for the prompt responses

[@kkkant1547]

Awesome how much total videos are there and what time we can expect for the course completion?

[@DevOpsMadeEasy]

It will be a huge series covering jenkins maven nexus sonar docker etc. So not sure of the timeline but you will love it

[@jaganmohan6557]

@@DevOpsMadeEasy please go on with series

[@SumitKumar-uq3dg]

@@DevOpsMadeEasy amazing work Vikram. Really appreciate. I learnt a lot from your docker and k8 series. Really excited for Jenkins