May 31, 2022

A Key Component to the Success of the Small Agency/IT Contractor Relationship: Cultural Understanding and Agility

Small agencies and bureaus manage billions of dollars and have missions integral to Federal government operations and services for the citizens of the United States. While Cabinet-level Departments often have tens of thousands of employees, the vital work done by…
November 10, 2021

Integrated DevSecOps with separate Federal Dev and Ops contractors? Yes, it can be done.

by Dr. Robert Buccigrossi, TCG CTO DevSecOps offers great potential for improving Federal IT practice by integrating development, security, and production performance as shared goals of a single IT team. The overall philosophy is that a unified team will naturally embrace practices that…
July 29, 2021

Filling a Gap in Federal DevSecOps

Keeping your entire organization focused on security with one data visualization tool. As shown by recent security breaches such as the Solarwinds hack and the ransomware attack on the Colonial Pipeline, effectively managing security vulnerabilities is important and difficult. But…
July 27, 2021

The Rise of “Simple” Kubernetes

by Dr. Robert Buccigrossi, TCG CTO Canonical (the organization behind Ubuntu Linux) has just announced MicroK8s (Micro-Kubernetes). Why should we care? Containers Can Make Deployment Easier — Well, speaking as a system administrator, setting up and managing machines is a pain, whether you do…
April 13, 2020

No, You Don’t Need Kubernetes for DevSecOps

By Robert Buccigrossi, TCG CTO If you google “DevSecOps”, you will find many references to deployment pipelines, and one of the most popular is from AWS (depicted in the diagram on the below). The pipeline involves many quickly evolving technologies such…
March 10, 2020

Faster OpenVAS Vulnerability Scanning

By Robert Buccigrossi, TCG CTO OpenVAS is a system vulnerability scanner that checks visible ports, services it can access for known exploits, and high level web threats (like cross-site script vulnerabilities and improper file access). The TCG Tech Team uses it to…
March 4, 2020

DevOps: a Top-Level View

By Robert Buccigrossi, TCG CTO There are myriad approaches, tools, and goals associated with the term “DevOps”. Inspired by a recent webinar I attended that presented a rather abstract view of DevOps, I went on a hunt for a concise synopsis of the term that covered both…
January 23, 2020

Yes, You Can Run Docker AND Virtualbox on Windows 10 Home

By Al Crowley, TCG Principal Engineer Running Docker containers on a Windows 10 PC has been difficult for the last few years. It’s even more difficult if you want to run VirtualBox virtual machines (VM) at the same time. A casual Google…
July 20, 2021

Using DevOps Principles to Modernize and Migrate a Legacy System to the Cloud

Supporting the NIH funded NITRC project led by the University of Massachusetts Medical School, TCG migrated the project website and neuroscience research tool to the cloud in 2020. NITRC is the central hub for neuroimaging scientists to collaborate and share resources,…