Don’t be Afraid to Upgrade
summary
Research analyzes 24,000 open source projects and surveys 679 enterprises and shows concrete outcomes: exemplar projects release 1.5x more often and enable 530x faster dependency upgrades, enterprises that adopt those practices achieve 15x faster deployments and 26x faster vulnerability remediation. Adversaries exploit new flaws in days or seconds, supply-chain injection incidents spike, and teams that automate bills of materials, SCA, and guard-rail approval processes stay measurably faster and more secure.
AI-written summary · about
chapters (13)
- 0:00Intro
- 2:35Software Supply Chain
- 8:00DevOps Reports
- 9:25Faster is Better
- 13:27Moving Quickly Benefits You
- 17:32Is Faster Better
- 24:35Enterprise Open Source
- 28:04Research Findings
- 29:50The Four Groups
- 31:43The Differences
- 34:58Average Performance
- 37:24Wrapping Up
- 41:22What Did We Find
related talks
45mDon’t be Afraid to Upgrade
45mExemplars, Laggards, & The Cautious: A Data-driven Look At High-velocity Software...
32mExemplars, Laggards, and Hoarders: A Data-driven Look at Open Source Software Supply Chains
32mAdapting DevOps in a World of Growing Software Supply Chain Attacks
25mMaintaining Agility and Security without Impacting Developer Experience
47m11,000 Voices: Experts Shed Light on 4-Year Open Source & AppSec Survey
13mManaging Vulnerabilities in Open-Source Dependencies
30mDevSecOps: How to Level Up IT Security Expertise in Your Organization