shimont

8 ms·

31.
by shimont 5y ago
I know! I think that the fact that developers are dealing more and more with infra is very empowering but on the other hand brings new challenges. It is no longer Dev VS OPS, but now Devs also need to learn infra best practices, so tools li
32.
by shimont 5y ago
The dashboard is also offered as part of our freemium offering :) we offer 1000 policy checks per month for free. Including the dashboard. In terms of what we offer compared to Polaris: We offer pre-defined policies that comes out of the bo
33.
by shimont 5y ago
Hey, some of our friends were over eager to help hehe :) I look forward to hearing your feedback! Thank you
34.
Show HN: Datree (YC W20): Prevent K8s misconfigurations from reaching production
144 points by shimont 5y ago|26 comments
35.
Managing Kubernetes Resources for Containers(datree.io)
9 points by shimont 5y ago|0 comments
36.
by shimont 5y ago
Hey all, I am the author of the post, feel free to ask any questions you might have :)
37.
Opal open source adds realtime updates to Open-Policy-Agent(opal.ac)
10 points by shimont 5y ago|1 comments
38.
by shimont 6y ago
I think that this is a great approach to test out the files. Mistakes in those files can cause a production outage. I like doing those tests once a PR is open and before it is merged into master and executed on the production cluster. (Disc
39.
by shimont 7y ago
Will do! thanks
40.
by shimont 7y ago
I totally agree! you should rotate the keys! we explain how to get rid of it in terms of Git. This is in addition to rotating it. Sorry for not being clear
41.
by shimont 7y ago
We educate our customers on how to delete the branch and remove it from history: https://docs.datree.io/docs/do-not-include-secret-files
42.
by shimont 7y ago
Currently, we support GitHub and working on releasing our support for GitLab and BitBucket. We plan on running on top of existing git hosting solutions
43.
by shimont 7y ago
We are actively working on supporting GitLab and BitBucket. Once it is GA we will update you :)
44.
by shimont 7y ago
Initially, we started as a CLI tool, but as you said, it is part of the problem, how do you make sure all of your developers are using the CLI/pre-commit hooks? This is why we choose to integrate on the pull-request level. It is not pe
45.
by shimont 7y ago
I would love to hear more about your experience! could you please email me at Shimon [AT] Datree IO? I believe that now is the right time for a solution like Datree. I think so because of the way we develop software has evolved, companies m
46.
by shimont 7y ago
Most companies we see try to implement something by themselves. pre-commit hooks is a major problem as it requires all the developers to install them on their computer, which is part of the problem itself right? aligning the dev team :) You
47.
by shimont 7y ago
Hey :) Here are several examples of custom rules: * Verify that CI configuration includes running certain jobs (e.g. third-party packages scanner). * Ensure that all Docker containers are using a pinned down tag and not "latest" *
48.
by shimont 7y ago
Every policy can be edited and tweaked to your use case using our engine and Regex. In addition, you can use our dashboard to view all executions
49.
by shimont 7y ago
You might call it that in a way. This is where the engine is hooking. We scan the entire source control and curate rules for you to use around technologies
50.
Launch HN: Datree (YC W20) – Best practices and security policies on each commit
106 points by shimont 7y ago|52 comments
51.
Docker best practices for secure and lightweight Dockerfiles(datree.io)
12 points by shimont 7y ago|0 comments
52.
Top Best Practices for Serverless.yml(datree.io)
6 points by shimont 7y ago|0 comments
53.
Building a Modern CI/CD Pipeline in the Serverless Era with GitOps(aws.amazon.com)
2 points by shimont 7y ago|0 comments
54.
by shimont 7y ago
I think that what works for companies like Uber/Google/Facebook is not applicable to the rest of fortune 500 or all of the rest of the companies. disclaimer: I am one of Datree.io founders. We provide a visibility and governance s