Check Point® Software Technologies Ltd. has been recognized as a leader in The Forrester Wave™: Zero Trust Platform Providers, Q3 2023 report.
The software development lifecycle is now so ingrained in our lives, it's often invisible to end users.
Updates to the software we use daily are so smooth we rarely even notice them. This is thanks to continuous integration and continuous development (CI/CD), which have streamlined software delivery through frequent and consistent code changes.
We now look to continuous merge to keep perfecting the software delivery lifecycle beyond what CI/CD has made possible. Continuous merge further optimizes the pull request (PR) merge path, reducing cycle time and accelerating software delivery.
How Continuous Merge Completes the Promise of CI/CD
We're all familiar with the inefficiencies that can arise when a collaborator begins reviewing a PR. If another action item pops up for the reviewer, the PR is too long or the assignment of the PR is sub-optimal, the entire process can stall.
What do these inefficiencies look like in terms of data?
■ The average cycle time for a piece of code (first commit to deployment) is 7 days.
■ Half of all PRs are idle (e.g., no one is actively working on them) for at least 50% of their lifespan.
■ Cycle time and idle time doubled for pull requests of 200 lines of code compared to pull requests with 100 lines of code.
These inefficiencies cost engineering teams valuable time — time they simply don't have to lose. On top of bottlenecking the software delivery process, these roadblocks also destroy the developer experience.
Enter: continuous merge, a mindset that encourages the use of automations and policy-as-code to steamline the code review process. Continuous merge is an effort to apply unique treatment to every pull request, and is a response to the one-size-fits-all code review policies that have become commonplace across the industry.
How to Get Started with Continuous Merge
Continuous merge is a mindset that is typically adopted incrementally. The best place to start is by looking for inefficiencies in your coding and PR review process and implement workflow automations to optimize your processes.
Here are some tips for ways you can get started today:
■ Unblock merges for low-risk changes like documentation, dependency updates, tests, logging, non-critical assets, and any other parts of your codebase that don't need as much scrutiny during the review process. You can auto-merge these changes to keep your dev team focused on mission-critical work.
■ Automatically flag security issues, compliance failures, and other unwanted software development practices to reduce the cycles your team spends catching and resolving issues.
■ Establish standards and practices for building code expertise and tap into these experts when they're needed for code reviews.
■ Identify inefficiencies in your CI/CD pipelines and implement workflow automations to reduce the amount of time your dev team spends waiting on services to complete.
■ Set goals for code reviews and implement automatic notifications to alert your team when they're at risk of falling behind.
Continuous Merge's ROI
Teams that adopt a culture of continuous merge see spectacular ROI. In fact, my team analyzed data from 2,000 dev teams and 4.5 million code branches and found that teams leveraging automation saw:
■ PR size reduced by 28.18%
■ Cycle time shortened by 61.07%
■ PR review time improved by 38.14%
■ Pickup time decreased by 56.04%
Continuous merge is a new approach to software development that takes the principles of CI/CD to a whole new level. Now is the time to reap the benefits of continuous merge in your engineering organization to give your company a competitive edge like never before.
Industry News
Red Hat and Oracle announced the expansion of their alliance to offer customers a greater choice in deploying applications on Oracle Cloud Infrastructure (OCI). As part of the expanded collaboration, Red Hat OpenShift, the industry’s leading hybrid cloud application platform powered by Kubernetes for architecting, building, and deploying cloud-native applications, will be supported and certified to run on OCI.
Harness announced the availability of Gitness™, a freely available, fully open source Git platform that brings a new era of collaboration, speed, security, and intelligence to software development.
Oracle announced new application development capabilities to enable developers to rapidly build and deploy applications on Oracle Cloud Infrastructure (OCI).
Sonar announced zero-configuration, automatic analysis for programming languages C and C++ within SonarCloud.
DataStax announced a new JSON API for Astra DB – the database-as-a-service built on the open source Apache Cassandra® – delivering on one of the most highly requested user features, and providing a seamless experience for Javascript developers building AI applications.
Mirantis launched Lens AppIQ, available directly in Lens Desktop and as (Software as a Service) SaaS.
Buildkite announced the company has entered into a definitive agreement to acquire Packagecloud, a cloud-based software package management platform, in an all stock deal.
CrowdStrike has agreed to acquire Bionic, a provider of Application Security Posture Management (ASPM).
Perforce Software announces BlazeMeter's Test Data Pro, the latest addition to its continuous testing platform.
CloudBees announced a new cloud native DevSecOps platform that places platform engineers and developer experience front and center.
Akuity announced a new open source tool, Kargo, to implement change promotions across many application life cycle stages using GitOps principles.
Check Point® Software Technologies Ltd. announced that it has been recognized on Newsweek’s inaugural list of the World’s Most Trustworthy Companies 2023.
CloudBees announced significant performance and scalability breakthroughs for Jenkins® with new updates to its CloudBees Continuous Integration (CI) software.