Technologies in Pipeline Flashcards
(8 cards)
Git
A version control system that tracks changes to code. Developers use it to commit code changes and collaborate.
Simple Explanation: “Git is like a save button for code. It keeps track of all changes so you can go back if something breaks.”
Jenkins
An automation server that handles building, testing, and deploying code.
Simple Explanation: “Jenkins is like a robot that builds and tests your code automatically whenever you make changes.”
SonarQube
A tool that checks code for quality issues, like bugs, vulnerabilities, and coding standards.
Simple Explanation: “SonarQube is like a spell-checker for code. It finds mistakes and tells you how to fix them.”
Checkmarx
A static application security testing (SAST) tool that scans code for security vulnerabilities.
Simple Explanation: “Checkmarx is like a security guard for your code. It looks for weaknesses that hackers could exploit.”
Blackduck
A tool that scans for open-source components in your code and checks for license compliance and vulnerabilities.
Simple Explanation: “Blackduck is like a librarian. It checks if you’re using open-source code legally and safely.”
ThreadFix
A vulnerability management platform that consolidates findings from tools like Checkmarx and Blackduck.
Simple Explanation: “ThreadFix is like a to-do list for fixing security issues. It collects all the problems found by other tools.”
JFrog Artifactory
A repository manager that stores build artifacts (e.g., compiled code, libraries).
Simple Explanation: “JFrog is like a storage room for your code. It keeps everything organized and ready for deployment.”
UrbanCode Deploy
A deployment automation tool that pushes code to different environments (Dev, QA, UAT, PROD).
Simple Explanation: “UrbanCode Deploy is like a delivery truck. It takes your code and drops it off in the right place (Dev, QA, etc.).”
