Topics include Supply Chain Security, Vulnerability Management, Neat Tricks, and Contributor insights.
In the process of building the Ortelius open-source community, we’ve learned two important facts. First, everyone has something to share regardless of their experience or background. Second, sharing thoughts and expertise is an important part of the open-source community. Ortelius welcomes bloggers of all kinds. Here is the current Blog topics:
Month | Topic |
---|---|
October 24 | What Data is Important to Measure in the DevSecOps Pipeline? Can qualify for Hactoberfest |
November 24 | Understanding and Mitigating Vulnerabilities |
December 24 | Future Directions for Continuous Security Intelligence |
January 25 | How can AI & ML improve DevSecOps workflows? |
February 25 | How do you track and report security compliance |
March 25 | Understanding SBOM and their Uses |
April 25 | Understanding how to comply with Government SBOM Requirements |
May 25 | Using Mitre Attack for Threat Modeling |
June 25 | Understanding Secure Software Development Framework |
July 25 | Open to all Blogs (any topic of your choosing) |
August 25 | Anything on Observability (Logs, Metrics, Trace) |
September 25 | What OpenSSF Security Tooling should be the DevOps Pipeline? |
October 25 | Open Source Vulnerability Management and FINOS |
Submit your blog by the second week of the month to meet the publish deadline for that month. So, if you are submitting for October, have your blog submitted by October 15th.
Submitting a blog is easy, once you have chosen your topic. Here are some tips.
Writing a blog is all about telling others what has caught your attention. It is from this place that you will write great content. If you are like me and easily distracted by something new, it may be hard to decide what to write about. During our annual BlogAThon, suggested topics are added to the Ortelius/Outreach repo in the form of issues. You can assign yourself one of these issues, which is great way to challenge yourself to learn something new, or share your expertise in a new area, for example, blockchain, SBOMs, Kubernetes, supply chain, etc.
There are different styles of blogs that you can contribute. For example:
If you are new to blogging here are some suggestions for how to construct the blog.
Introduction - At the beginning of your blog, summarize what you are going to tell your audience. Let them know what they will learn. This section can grab the attention of your reader if you title it with a basic definition for example, “What is blockchain?” or “What is an SBOM?”
Body - Blogs that are too long are not often read to completion. Keep your blog below 1000 words. Well written blogs of 500 words can do the job.
Conclusion - Summarize your information in one or two sentences. You might want to add a list of further reading.
References - If you have done research for your blog, tell everyone where you found it. Give credit where credit is do.
To submit a blog to the Ortelius website, it must be written in Markdown format for the Hugo Server and submitted back to the Ortelius/Outreach repo for editing and approval.
Markdown is super easy to learn. Don’t let this get in your way. You can always refer to other blogs in the Ortelius Website Repository. You will quickly see how simple Markdown is, and will be able to copy more complex functions like adding an image. In addition, there are many websites that explain Markdown syntax including:
I use Visual Studio to do all my editing. If you don’t have an editor, consider downloading Visual Studio. You can configure Visual Studio to connect to the Ortelius repo.
If you are not already part of the Ortelius Dev Group, you will need to be added in order to be assigned blogs. Follow these steps to be added to the Dev Group:
The Ortelius Administrators will send you an invite to become part of the Ortelius Dev Group. This will then allow you to assign yourself to Blog Issues under the Ortelius/Outreach repo.
You can review the open ‘blog’ issues at Ortelius/Outreach repo. If you don’t find a blog suggestion that you like, create a new Issue and assign it to yourself. Blogs can be submitted at anytime during the year, not just during BlogAThon.
Once you are ready to submit your blog for review and acceptance, go to the Ortelius/Outreach repo and find your issue. Respond to the issue by attaching your markdown file to be reviewed. If you have images that need to be included, attach these images as well.
The Ortelius community welcomes your blogging skills. You can select any type of topic, but the ones best suited for the Ortelius community include:
Everyone has something to share. The Ortelius Community looks forward to hearing your voice and thoughts.
Tracy is an open-source enthusiast and the Community Director for the Ortelius Open-Source Project. Tracy is the CEO of DeployHub, Inc. She has over 25 years of experience in managing the software life cycle from build through release. She is expert in software supply chain issues. She has served on the Governing Boards of the Eclipse Foundation, Continuous Delivery Foundation and the OpenSSF. Learn more about Tracy from her LinkedIn Profile.