Clair is an open-source container vulnerability scanner recently released by CoreOs. The tool cross-checks if a Docker image's operating system and any of its installed packages match any known insecure package versions. The vulnerabilities are fetched from OS-specific common vulnerabilities and exposures databases. Currently supported are Red Hat, Ubuntu, and Debian.
One of the key takeaways from this survey is that SOA is real and happening on a large scale. Governance was critical or moderately important for 91% of the respondents. The survey also sampled the most popular SOA standards. InfoQ spoke with Miko Matsumura, Deputy CTO of Software AG, who commented the results.
Michael Stamback, who just started a new blog on SOA Governance, asked this question a couple of weeks ago. Can the introduction technology help your SOA Governance effort? or are the cultural and organizational issues simply too overwhelming?
The topic of virtualization has been heating up in the SOA space as more and more enterprises look for ways to harvest their existing IT assets towards new service infrastructure. Microsoft's recent silence on the issue has now made way for a community focused release of a meta-data driven service repository.
Service Governance is an essential aspect of a successful Service Oriented Architecture. Its establishment has to be planned and tested out early in the initial phases of a SOA initiative. In this article, Jean-Jacques Dubray shows what it takes to create such a structure efficiently.
Since the days of UDDIv1, the concept of service registry has evolved under the momentum of innovators and market leaders. The latest vendor to enter this market is SAP. The new SAP registry aims at supporting the alignment of business architecture, enterprise architecture and solution architecture from design time to runtime.
Software AG and Fujitsu have released CentraSite Registry/Respository 3.1. InfoQ talks to Software AG's Gerd Schneider about the role of a registry/repository in SOA and the CentraSite product in particular.
Steve Jones has written a blog entry where assesses the main SOA vendors' offerings, including IBM, BEA, Oracle, SAP, Sun, and Microsoft, using a wide range of categories.
Two years ago UDDI v3.0 became an OASIS Standard. There are only a few vendors offering Service Registries and the main players have kept quiet. Many have blogged over the death of UDDI and the community seems to have lost interest in the Service Registry vision. Today as SOA Governance has become a major topic of interest, Service Registries are about to enter the scene, again.
EAI vendor TIBCO has announced an agreement to resell Systinet's UDDI registry, making it the third major vendor to do so after BEA and Oracle.
Jon Galloway has released a tool that allows developers to record and playback registry changes.
The freebXML Registry team announces the release of version 3.0-final of the royalty-free open source implementation of the ebXML Registry standard. InfoQ gets some information about this release from Farrukh Najmi, one of the leaders of the project.
The SOA Link initiative, started by SOA Registry vendor Infravio in May, expands to include testing and QA vendors iTKO, Mindreef, and Solstice.