devopsy.kinsta.cloud

Tag: Broadcom

Broadcom Launches Trusted Artifact Service for Spring Framework

Broadcom today at the VMware World Explore conference a set of hardened artifacts for the open source Spring framework, including the 5,000 dependencies that are needed to run it.

TrueSource Trusted Artifacts by Broadcom provides access to artifacts built in a clean room, including instances of Apache Tomcat, Kotlin, PostgreSQL, RabbitMQ, MySQL, and Valkey databases and middleware. It also extends to the Bitnami Secure Images catalog, adding hardened, verifiably built container images for hundreds of commonly used open source packages.

Based on the enterprise edition of the Spring framework that Broadcom supports, TrueSource Trusted Artifacts by Broadcom includes curated artifacts written in Java, Python and Node.js. Every library and artifact is selected against a reference architecture, then built and verified by human Broadcom engineers. That aspect of the service is critical because patches generated by AI coding that have not been validated by software engineers are much more likely to break an application running in a production environment.

Broadcom, via this service, will also scan customer repositories, assess the potential blast radius of each release, and then open pull requests based on the lowest-risk remediation path determined. There is also a set of dashboards through which DevSecOps teams can track what has been fixed and what tasks remain to be completed.

DevSecOps teams will also have the option to bring not-yet-public vulnerabilities they discover for early access remediation. In addition, there is a special program for critical infrastructure organizations that provides them with dedicated access to patch insights and mitigation advice.

Finally, Broadcom is committing to contributing the fixes it creates back to the maintainers of the open source software that it has remediated.

Purnima Padmanabhan, general manager for the Tanzu Division of Broadcom, said TrueSource Trusted Artifacts by Broadcom brings a lot of our open source capabilities together under one umbrella in a way that remains true to open source. In fact, Broadcom claims that over the past five months, engineers have already spent more than 12 billion tokens against frontier models to secure open source projects to ensure that every supported release line is patched before a Spring-related vulnerability is ever published.

Those efforts are crucial because earlier this year Broadcom revealed there has been a more than 1,700% surge in monthly security advisories reported by the Spring community, resulting in the largest set of security patches in Spring’s 23-year history being created and delivered.

Mitch Ashley, vice president and practice lead for software lifecycle engineering at The Futurum Group, said a curated pipeline inside the customer’s own build and deploy path addresses a key software supply chain requirement. Teams pull libraries, images, and data engines already built, signed, and pinned to the versions their release lines support, with automation that opens pull requests carrying the lowest-risk fix, he added.

That removes work enterprises absorb today: Triaging advisories, testing patches, and deciding what is safe to ship, noted Ashley.

It’s not clear to what degree exploits created using AI are starting to overwhelm DevSecOps teams, but the one thing that is clear is nearly all of them will require additional help to keep pace. After all, it’s not so much a question of whether there will now be more incidents so much as how much they can first be prevented and, just as importantly, rapidly contained.

August 31, 2026
Report Shines Spotlight on 91 Vulnerabilities Fixed in Latest Update to Spring Framework

A report published by Sonatype identifies more than 91 vulnerabilities that have been remediated in the latest update to the open source Spring framework for deploying Java applications mashed available by Broadcom earlier this month.

Released earlier this month, the 91 vulnerabilities affect 209,569 software components that will need to be updated.

Sonatype CTO Brian Fox said this large number of vulnerabilities that are being simultaneously released is another indication the providers of major software platforms are racing to pay down massive amounts of technical debt before vulnerabilities are discovered and exploited by cybercriminals that are gaining access to advanced artificial intelligence (AI) models.

Providers of platforms such as Spring already have access to those same AI models, which has given them a head start to find and remediate vulnerabilities before adversaries exploit them. In fact, Broadcom between March and April increased the number of advisories it has issued by more than 1,700%, according to the Sonatype report.

DevSecOps teams, in the meantime, are being tasked with making often simultaneous large-scale updates to multiple frameworks and platforms as providers rush to pay down technical debt that has been allowed to accrue for decades, noted Fox. Those teams, as a result, will need to find ways to automate the deployment of what will be a wave of patches that will need to be installed as quickly as possible. In many instances, DevSecOps teams will find they will be coping with tidal waves of updates to frameworks and platforms for multiple years to come, noted Fox.

Eventually, however, there can only be so many issues to fix, so following those waves of updates, the overall state of application security should substantially improve, he added. In the meantime, however, instead of applying patches to applications a couple of days a month, DevSecOps teams for the foreseeable future may find that they now need to continuously update applications, said Fox.

The challenge, of course, is that today exploits in many cases are being built faster than a patch can be created and applied. Adversaries are also becoming more adept at using AI to chain together low-level vulnerabilities to create a more lethal exploit. As such, DevSecOps teams are likely going to need to be able to apply virtual patches and other controls to mitigate threats while waiting for patches that, with the aid of AI coding tools, will now be made available much faster.

The proverbial fly in that ointment is that many of the maintainers of smaller open-source software projects that an application may depend on may not be able to keep pace. Multiple initiatives have been launched to aid those maintainers; however, many of those projects were created by a volunteer labor force that might not have the time, resources, or inclination to build, test and apply a software patch in a matter of days or, if needed, hours. Many enterprise IT organizations may need to rationalize the amount of open source software they have deployed because, as an unpaid labor force to keep pace with building, testing and applying patches is silly on its face, noted Fox.

At this juncture, it may not be possible to fix every application before it is exploited. Hopefully, however, organizations will be able to prioritize making updates to their most critical applications to, at the very least, limit the potential havoc that otherwise will most certainly soon ensue.

August 25, 2026
Broadcom Aims to Better Secure Spring Applications in the AI Era

Broadcom today released a raft of updates to the open source Spring framework for building Java applications to primarily address a wave of vulnerabilities discovered by researchers using artificial intelligence (AI) tools.

At the same time, Broadcom is also adding a managed service through which organizations can secure thousands of Spring dependencies for organizations building applications using its distribution of the Spring framework. That service is based on the Bitnami clean room technology that Broadcom uses to create secure images and Tanzu Buildpacks that automatically convert source code into images based on the Open Container Image (OCI) format.

Broadcom gained access to that platform as part of its acquisition of VMware, with the Spring framework now part of the Tanzu division of Broadcom, which focuses on Java application development and the open source Cloud Foundry platform-as-a-service (PaaS) environment through which Buildpacks were first developed.

Kevin Strohmeyer, head of marketing for the Tanzu division of Broadcom, said collectively these initiatives highlight Broadcom’s ongoing commitment to the Spring framework and its willingness to provide additional services to enable organizations to secure their Java supply chains.

Now that security researchers are using the latest generation of frontier models to discover more vulnerabilities, Broadcom today revealed that the number of monthly security advisories reported to Broadcom by the Spring community increased by more than 1,700% from March to April of this year. Enterprise IT organizations as a result are now looking to Broadcom to provide additional services to ensure that patches that are created to remediate these zero-day vulnerabilities are validated and applied as quickly as possible, said Strohmeyer.

It’s not clear what impact the sudden discovery of thousands of zero-day vulnerabilities is having on DevSecOps workflows but the amount of time required to create an exploit continues to rapidly decline in the AI era. In many cases, exploits are now starting to be created even before there is a patch available.

Ultimately, each organization is going to need to recalibrate their level of risk appetite. Historically, most organizations were more concerned a patch might be worse than the disease because if deployed it could take an application offline. However, in the age of AI it’s clear that cybercriminals and other adversaries are now able to exploit a vulnerability in a few hours. In the event of a breach, the amount of damage that could be inflicted might prove to be more catastrophic than an application being temporarily unavailable.

The challenge, of course, is assessing that risk because there are, of course, applications that generate millions of dollars in revenue per minute. In those instances, the level of risk attached to a zero-day vulnerability might not seem so high.

Regardless of approach, however, the one thing that is certain is the way vulnerabilities were managed in the past is never going to be the same in the AI era. In fact, many DevSecOps teams may soon find themselves continuously patching applications to stay one step ahead of cybercriminals are forever now going to be hard on their heels.

June 8, 2026
Broadcom Adds AI Agent Runtime to Tanzu PaaS Environment

Broadcom today revealed it has added a runtime to its Tanzu platform-as-a-service (PaaS) environment that makes it possible to securely build and deploy artificial intelligence (AI) agents.

Based on the open source Cloud Foundry PaaS environment being advanced under the auspices of the Cloud Native Computing Foundation (CNCF), the Tanzu PaaS is optimized to be deployed on the VMware Cloud Foundation (VCF) that Broadcom also provides.

Purnima Padmanabhan, general manager for the Tanzu division at Broadcom, said the runtime extension will make it possible for software engineering teams that have adopted Tanzu to use the same tools and workflows they currently use to build and deploy applications to also securely build and deploy AI agents that are confined to a set of authorized boundaries running within a container that are enforced using guardrails embedded within the PaaS environment. As such, each AI agent is prevented from reading any other set of credentials at runtime other than the ones that have been assigned to it.

DevOps teams can also allocate a pre-defined set of resource limits to ensure that no runaway agentic loops are created.

As is the case with existing instances of Cloud Foundry, those containers are created using the Buildpacks framework that makes it possible to automatically patch and verify any update to an application or AI agent. DevOps teams can also opt to customize a prebuilt AI agent to further accelerate the building of AI agents using a Spring framework that is based on Java.

Broadcom has been making a case for a PaaS that eliminates the need for DevOps teams to build and deploy their own platform for managing software engineering workflows. That approach enables organizations to focus more of their time and effort on building applications versus managing infrastructure.

The Tanzu Platform is in turn optimized to be deployed on VCF, a framework that can be deployed in the cloud or on-premises IT environments. That platform, in addition to providing access to VMware virtual machines, also includes an embedded VMware vSphere Kubernetes Service (VKS) for orchestrating container applications.

It’s not clear to what extent the rapid pace of AI coding tools accelerating application development will entice DevOps teams to standardize on a PaaS. However, with the rise of platform engineering as a methodology for managing DevOps workflows at scale, larger enterprises are starting to once again appreciate the higher level of abstraction that a PaaS environment enables, said Padmanabhan. The alternative is to create yet another silo for building and deploying AI agents, which ultimately only serves to increase cost and complexity, she added.

The Tanzu approach, in contrast, ensures organizations will be able to deliver much faster times to value when building and deploying AI applications, noted Padmanabhan.

The one thing that is certain is that as more custom AI agents are built many software engineering teams will need to extend their existing workflows. Exactly how many custom AI agents might be deployed in an enterprise is unknown, but in many cases organizations are going to want to exercise more control over AI agents they might opt to build using any number of large language models (LLMs).

April 15, 2026
Broadcom Adds Argo and Ubuntu Support to VMware Cloud Foundation

Broadcom today at the VMware Explore 2025 conference unfurled a set of developer services for the instance of Kubernetes it has embedded into its VMware Cloud Foundation (VCF) platform that includes the Argo continuous delivery (CD) platform.

At the same time, Broadcom expanded its alliance with Canonical to include enterprise-grade support for instances of VCF running on top of the Ubuntu OS platform.

The instance of Kubernetes that is embedded into VCF will also now support Chiseled Ubuntu containers, which minimize footprints by removing unnecessary packages, utilities, and libraries to enable faster download times, reduced storage costs, and faster startup.

Finally, Broadcom is working with Canonical to enable faster deployments for artificial intelligence (AI) workloads using precompiled drivers for graphical processor units (GPUs) to both consume infrastructure more efficiently and reduce dependencies on external repositories to download drivers.

Broadcom, in the wake of acquiring VMware, has shifted its platform strategy to place more emphasis on running containerized applications on an instance of Kubernetes that is embedded in VCF. The VMware Tanzu platform, in contrast, is now based on an instance of the Cloud Foundry platform-as-a-service (PaaS) environment rather than an instance of Kubernetes.

In furtherance of that strategy, Broadcom is now adding a set of developer services to vSphere Kubernetes Service (VKS) that, in addition to Argo, add support for the Istio service mesh, Postgres and MySQL database and, via a VCF Advanced Cyber Compliance service add-on, support for hardened containers.

Krish Prasad, senior vice president and general manager for the VCF division of Broadcom, said developer services will make it possible for organizations that have adopted VCF to more easily support application developers without needing to set up separate teams for managing virtual machine and container environments. As Kubernetes and containers become more widely deployed, there is a clear need for operational efficiencies that also address compliance and security concerns, he added.

IT teams will be able to use best GitOps practices using Argo CD, while still being able to apply the controls that IT teams require to centrally manage IT infrastructure. Broadcom is also previewing access to a technical preview of an artificial intelligence (AI) agent it has trained to automate IT operations tasks and workflows.

In general, Broadcom is clearly making an effort to unify DevOps workflows and IT infrastructure management that within many enterprise IT organizations are typically managed by administrators rather than software engineers. That effort aligns with the rise of platform engineering as a methodology for managing application environments at scale that Broadcom is positioning VCF to address.

It’s not clear to what degree enterprise IT organizations are standardizing on VCF but for its second fiscal quarter Broadcom reported $6.6 billion in infrastructure software revenues, up 25% year over year. Third-quarter fiscal 2025 infrastructure software revenues projected at $6.7 billion, representing a 16% year-over-year increase. Broadcom also announced today that Walmart has agreed to standardize the management of virtual infrastructure on VCF, including providing its developers with access to Kubernetes clusters via VKS.

Daniel Newman, CEO of the Futurum Group, said those results show that despite recent controversies involving changes to the VMware licensing program, most customers are continuing to rely on VMware to manage their IT environments. While there may have been some defections, even many smaller organizations are opting to stay with VMware, he added.

It may be a while before IT organizations unify the management of IT environments. Many DevOps teams were created to provide a more agile approach to building and deploying applications that didn’t rely on a highly centralized IT team. However, many of those same DevOps teams are now spending more time managing IT infrastructure than they are writing code. As such, there is now a clear need to strike a balance between DevOps freedom and the need to optimally manage IT infrastructure.

August 26, 2025
Five Great DevOps Job Opportunities

devopsy.kinsta.cloud is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted to better serve our audience.

Our goal in these challenging economic times is to make it easier for DevOps professionals to advance their careers.

Of course, the pool of available DevOps talent is still relatively constrained, so when one DevOps professional takes on a new role it tends to create an opportunity for others.

The five job postings shared this week are selected based on the company looking to hire, the vertical industry segment and, naturally, the pay scale being offered.

We’re also committed to providing additional insights into the state of the DevOps job market. In the meantime, for your consideration:

CareerBuilder.com

EY
Austin, Texas
Technology Consultant – Cloud DevOps
$136,360

Indeed.com

Liberty Mutual
Plano, Texas
Lead AWS DevOps Engineer/SAS Viya
$133,200 to $246,900

SimplyHired.com

Dev Technology
Reston, Virginia
DevOps Engineer
$120,000 to $180,000

Dice.com

CGI
Fairfax, Virginia
DevOps Manager
$120,000 to $150,000

LinkedIn

Broadcom
San Jose, California
DevOps Version Control Administrator
$111,000 to $210,000

March 11, 2024
Broadcom Survey Surfaces Raft of IT Automation Challenges

A survey of 501 IT leaders published today by Broadcom suggested that islands of automation that operate independently of each other are major contributing factors to organizations failing to meet service level agreements (SLAs).

The survey found that 98% of respondents encountered at least one automation issue, with 61% noting that SLA issues are a monthly occurrence. More than a third (35%) said these issues occur weekly. A full 88% indicated SLA breaches directly impacted customers in a significant way.

The survey also found nearly three-quarters (74%) lacked visibility across their data center and cloud environments, with an equal number lacking end-to-end visibility of their automated business processes. Only 28% possessed tools that could predict automation issues, and more than two-thirds (68%) were unable to model or predict whether a new or updated automation job would actually meet SLAs. A full 69% said they are unable to properly size automation workload resources, with 61% having no way to simulate automation workloads before implementation, the survey found.

Only slightly more than half (55%) of respondents, however, could provide SLAs and key metrics in a format that is appropriate for business stakeholders.

Aline Gerew, head of automation for the Agile Operations Division at Broadcom, said that while it’s routine for IT teams to leverage a range of automation tools and platforms to manage IT, it’s clear they are challenged to manage those platforms in a comprehensive fashion. As a result, whenever there is an issue with one tool or platform, it creates a bottleneck that impacts customer experience in a way that ultimately adversely impacts revenue, she noted.

In fact, many IT teams are now starting to identify automation architects within their IT teams to enable DevOps teams in a more holistic manner, added Gerew.

Overall, the survey found that 80% of respondents are using three or more automation platforms, with just over a quarter (27%) using six or more.

Nearly three quarters (74%) are also relying on three or more observability solutions, with just under a quarter (24%) using six or more. Just under three-quarters of respondents noted they are consequently subjected to alert storms that ultimately serve to make it more challenging to resolve issues. More than half (56%) of respondents are blind to the downstream effects of an initial alert and, as a result, do not inform response teams of which systems, jobs, applications and business processes are affected.

In some ways, IT automation has become too much of a good thing. Every provider of an IT platform makes automation tools available, but as they are invoked, each one creates yet another island that IT teams are expected to manage in isolation. However, all it takes for an SLA not to be met is for an issue to arise that IT teams can’t easily determine the root cause of because one or more automation platforms obscure the underlying issue in the absence of any standardization, noted Gerew.

Given the complexity of modern IT environments, automation is now a requirement. The issue, as always, is finding a way to apply it all in the most transparent way possible.

January 9, 2024
Broadcom Survey Surfaces Slow but Steady VSM Progress

A survey of 501 business and IT leaders published this week found well over half (60%) have adopted some form of value stream management (VSM), but most of those efforts are still in the early stages, with 13% in planning, 25% having a pilot project and 23% applying VSM to a single project. Only 10% are applying VSM broadly across their application development initiatives.

Conducted by Dimensional Research on behalf of Broadcom, the survey found the most widely used VSM tools remain Excel spreadsheets (50%), followed by 42% using home-grown tools. Well over two-thirds (69%) share VSM metrics quarterly or monthly but only 9% indicate this data is being made available continuously, the survey finds.

Not surprisingly, only 36% said they have good or excellent visibility, while 21% characterize their visibility as either poor or a complete “black hole.”

Laureen Knudsen, chief transformation officer at Broadcom, said while VSM progress is being made, there is clearly much work to be done. To facilitate those efforts, Broadcom is now making available a VSM Maturity Model describing the five stages organizations will need to navigate before fully mastering VSM.

The primary reasons cited for adopting VSM include efficiency (79%), customer experience (71%), customer value (62%), profitability (60%) and alignment (44%). In general, organizations are adopting VSM to reduce redundant efforts, which should result in more profits from investments being generated faster, noted Knudsen.

Ideally, organizations should be able to surface business objectives within the context of the tools used to build and deploy applications, noted Knudsen. That approach will enable developers and the DevOps teams that support them to make better business decisions based on the dependencies that might exist between projects, she added. Otherwise, individual team members will make decisions without any understanding how they impact the business at all, said Knudsen.

Unfortunately, that lack of visibility is hard to achieve. The survey finds 85% of decisions are either made at the leadership level, or teams need leadership approval before implementing their decisions. Only 5.8% said decisions are made and implemented at the team level. That dependency on a centralized command and control model for managing application development is a direct result of an inability to collect and share relevant data with the teams working on various elements of a project, noted Knudsen.

In fact, the survey found only 11% of organizations don’t give employees business metrics by which they can achieve or measure products, even though 63% indicated they have metrics.

The more data a DevOps team has the more likely it becomes that the right decision will be made at the right time. Otherwise, factors that are more influenced by inherent biases that stem more from the role of the individual rather than the strategic objectives of the organization will have a bigger impact on how and when decisions are made.

Of course, VSM requires organizations to make investments in platforms capable of capturing and analyzing relevant data. The issue then becomes determining to what degree a VSM platform will provide a return on that investment in a way that results in more business objectives being achieved faster.

January 5, 2024
Broadcom Survey Surfaces Drive to Consolidate Automation Platforms

Broadcom this week published a global survey of 535 IT leaders that found more than three-quarters (78%) are moving to consolidate cloud automation tools and platforms. However, thus far, only 8% of respondents said they had completed that effort.

Overall, the survey also found more than 81% already have multiple cloud automation solutions in place, and 70% noted this issue had created significant challenges, including increasing time to automate (59%), time to report (52%) and time to remediation (52%) and higher costs (49%). In addition, 46% noted it’s more difficult to troubleshoot IT environments, while 41% noted multiple tools increase compliance risks.

IT teams also find that having multiple automation tools slows down software delivery (37%) and contributes to the over-provisioning of IT environments (32%).

Aline Gerew, head of automation for the Agile Operations Division at Broadcom, said the multiple islands of automation that have evolved on various cloud computing platforms now need to be centralized to reduce the current level of friction in the cloud. Those efforts need to start with platforms capable of unifying observability across all the platforms employed, she added.

The amount of consolidation that any IT organization can implement depends on the amount of political capital they have. In many cases, the applications and associated automation tools running in any given environment have been adopted by a department or business unit that exercises a lot of autonomy regarding IT. The issue that creates is multiple tools and platforms increase the total cost of IT. At a time when many organizations are experiencing economic headwinds, the need to reduce the total cost of IT naturally becomes a more pressing concern.

Rather than consolidate automation tools and platforms, the simpler option is to deploy an automation framework that is designed to be integrated with the various tools and platforms that are already in place, noted Gerew. That approach enables automation to be applied at much higher levels of scale to reduce costs without forcing every arm of an organization to standardize on the same tools and platform, she noted.

The survey found that, when it comes to cloud automation, the most important consideration factors are operational costs (62%), performance (53%) and operational efficiency (49%).

Responsibility for cloud automation will naturally vary from one organization to the next, but the survey noted that 67% of respondents currently have a cloud architect on staff and another 33% are planning to hire one.

That role is increasingly required as organizations find themselves managing a wide range of cloud computing environments, including software-as-a-service applications (57%), legacy applications that have been lifted into the cloud (56%), new cloud-native applications (46%) and legacy applications that have been refactored for the cloud (41%).

It’s apparent that cloud computing environments are becoming more complex with each passing day. There may come a day when artificial intelligence (AI) helps reduce the level of complexity; in the meantime, IT organizations need to find ways to streamline the management of cloud computing environments. Today, those environments are made up of applications based on a wide range of increasingly divergent architectures as the rate of application deployments exceeds the retirement of legacy apps.

September 1, 2023
Broadcom Survey Reveals Spike in VSM Adoption

Value stream management (VSM) is gaining traction as organizations look to find ways to engage customers more efficiently via digital business transformation initiatives.

A survey of 500 executives, IT and business leaders conducted by Dimensional Research on behalf of Broadcom published this week found 39% of respondents implemented a VSM platform with another 16% having some equivalent capability. Another 31% said their organizations is moving in the direction of adopting a VSM platform. A total of 60% of respondents indicated that they will be using VSM to deliver products in 2023, with 95% of organizations that have adopted VSM also engaged in digital transformation.

Laureen Knudsen, chief transformation officer for Broadcom, said the primary goal is to close the divide that has emerged over the years between software development teams and the rest of the business. More than two-thirds of respondents (68%) reported there are disconnects between the business and software development.

Overall, the Broadcom survey identified increasing customer value (58%), improving product quality (55%), reducing costs (51%), adding more customers (50%, increasing profits (49%) and increasing speed to market (45%) as the top strategic issues organizations face in 2023.

The top benefits derived from investing in VSM were increased transparency (42%), improved organizational alignment (39%), faster solutions to customers (38%), data-driven decision-making (37%) and improved access to data (36%).

VSM traces its lineage back to lean manufacturing methods, which called for each step of a manufacturing process to be continuously measured. As software development has evolved and organizations realize how dependent they are on software, there is a growing appreciation for the value of monitoring things such as the impact of missed software development deadlines on the business. At their core, VSM platforms aggregate DevOps metrics and then match them to a set of key performance indicators (KPIs) defined by business leaders. Once those metrics are gathered and correlated, organizations can apply advanced analytics. The goal is to apply algorithms and other forms of predictive analytics that will enable organizations to more easily identify the precise impact software development processes have on the business.

Knudsen said the survey makes it clear a lack of discipline when it comes to software engineering now needs to be addressed as organizations realize how dependent they are on applications to engage customers. Many organizations have, for example, adopted flawed approaches to agile development that wind up creating chaos across the software development life cycle, she noted.

Many organizations, for example, are unsure how much time development teams are spending on retiring the technical debt accrued within legacy applications versus actually working on developing new applications, Knudsen added.

Business conditions tend to change rapidly, so aligning software development with corporate goals is difficult. Nearly three-quarters (72%) of respondents said they are frustrated by the state of the business and constant changes to strategy. Digital business transformation initiatives, however, will require organizations to adopt a more structured approach to software engineering, said Knudsen.

The issue, of course, is the pace at which businesses are already being digitally transformed. The accelerated pace requires almost immediately re-engineering software development processes for them to succeed.

January 10, 2023