Blogs

a talk with Romano Roth, DevOps Thought Leader and Dr. Milan Milanović Architecture Thought Leader. Source: https://newsletter.techworld-with-milan.com/p/what-are-digital-factories 1. Romano’s short biography # I’m Romano Roth, Chief of DevOps and Partner at Zühlke. My journey with Zuhlke began 21 years ago. Over the years, I’ve evolved from an expert software engineer and software architect to a consultant. Throughout this journey, one question has always fueled my passion: How can we continuously deliver value while ensuring quality and automation?

In this podcast episode, I have a conversation with Peyton Einhaus about one of the most challenging aspects of any transformation: dealing with resistance. Whether you are running an agile transformation, a DevOps transformation, or any organizational change, resistance is always present. The question is how you handle it effectively.

Embedded and IoT devices are becoming increasingly popular in today’s world. These devices are used in various industries, such as healthcare, manufacturing, consumer goods and home automation. Ensuring the quality of these devices is crucial to ensure their reliability, safety, and functionality. But how to do that?

Sometimes in the world of platform engineering, we need to pause and appreciate the digital landscapes we build every day. This short, playful video is a guided meditation for platform engineers. Find a comfortable position, take a deep breath, and let me guide you through the world you create.

Every DevOps enthusiast faces the same challenge at some point: you know DevOps works, your team knows it works, but the decision makers want proof. They want a business case. In this talk at ContainerDays 2019, I break down a practical framework for convincing CIOs and managers to fund your DevOps transformation.

You want to do DevOps. Your team wants to do DevOps. Even your CIO wants to do DevOps. But then comes the inevitable question: “What is the business case?” In this five-minute Ignite Talk at DevOpsDays, I share a simple but powerful tool to convince decision makers that DevOps is worth the investment.

By Anna Redbond and Romano Roth on August 2, 2023 A lot of banks are moving to modern software development despite the traditional industry hurdles like compliance, regulations, and legacy architecture. The shared goal: becoming more adaptable to meet customers’ changing demands.

I had the honor of being interviewed by 📈 Matt Warcholinski 💾 from Brainhub in his 𝐏𝐨𝐝𝐜𝐚𝐬𝐭🎙️ on 𝐁𝐞𝐭𝐭𝐞𝐫 𝐓𝐞𝐜𝐡 𝐋𝐞𝐚𝐝𝐞𝐫𝐬𝐡𝐢𝐩. 🔎 If you’ve ever wondered about the ins and outs of introducing 𝐃𝐞𝐯𝐎𝐩𝐬 into your organization, this episode is a must-listen! We delved into some fascinating topics, and I’m thrilled to share a few highlights from our conversation:

At The DEVOPS Conference, I presented on a topic that has been at the heart of my work for over two decades: how to architect for continuous delivery. This talk covers the broken value stream I see in most companies, why product thinking matters more than project thinking, the science behind software delivery performance, and how platform engineering enables organizations to scale DevOps through digital factories.

At the State of DevOps in Switzerland 2023 event, I joined Adrian Kosmaczewski from VSHN to present the latest findings on DevOps adoption in the Swiss market. Adrian shared four years of survey data, while I focused on how to successfully scale DevOps through platform engineering and the concept of the digital factory. This event brought together DevOps professionals both on-site and virtually for presentations and a lively panel discussion.

After eleven sessions building a full DevSecOps pipeline with GitHub — covering Software Composition Analysis, License Compliance, SAST, Container Scanning, Secret Detection, DAST, Pull Requests, Scheduled Pipelines, and Vulnerability Management — Patrick Steger and I close the series with our recommendations. What works on GitHub, where the gaps are, and what we would tell anyone setting out to build the same pipeline.

Across ten sessions we wired security checks into a GitHub Actions pipeline that fires on every commit and every Pull Request. That covers code we are actively changing. It does not cover the code that is already running in production while researchers keep finding new CVEs in the libraries it uses. In Part 11 of the GitHub DevSecOps series, Patrick Steger and I add a scheduled workflow that re-scans the production branch — and we run straight into a GitHub limitation worth knowing about up front.