{"podcast":{"title":"Arrested DevOps","slug":"arrested-devops","podcast_index_feed_id":1039729,"rss_url":"https://www.arresteddevops.com/episode/index.xml","website_url":"https://www.arresteddevops.com/","image_url":"https://www.arresteddevops.com/img/ado-podcast-logo.png","author":"Matt Stratton","episode_count":205,"summary":"Arrested DevOps is the podcast that helps you achieve understanding, develop good practices, and operate your team and organization for maximum DevOps awesomeness.","last_synced_at":null,"page_url":"https://stenobird.com/podcast/arrested-devops"},"episode":{"title":"Runtime Analysis With Brian Kelly","slug":"runtime-analysis-with-brian-kelly","published_at":"2023-11-23T21:52:59+00:00","page_url":"https://stenobird.com/podcast/arrested-devops/runtime-analysis-with-brian-kelly","show_page_url":"https://stenobird.com/podcast/arrested-devops","url":"https://www.arresteddevops.com/runtime-analysis/","audio_url":"https://media.blubrry.com/arresteddevops/content.blubrry.com/arresteddevops/arrested-devops-podcast-episode197.mp3","summary":"Runtime analysis provides a new data source by recording application behavior during development to catch flaws before production deployment. Unlike static analysis, it identifies real-world execution patterns like inefficient database queries and unused libraries.","meta_description":"Explore how runtime analysis bridges the gap between static analysis and observability to catch performance and security issues during development.","key_points":["Main idea: Runtime analysis captures dynamic execution data, such as actual function calls and library loads, that static analysis cannot see","Practical takeaway: Developers can use runtime signals to identify N+1 query patterns and optimize resource usage before code reaches production","Failure mode: Over-reliance on noisy automated alerts can lead to developer fatigue, similar to the early days of static analysis tools","Main idea: High-quality runtime tools integrate directly into existing developer workflows, such as via IDE 'run' buttons, rather than requiring separate processes","Practical takeaway: Runtime analysis helps prune dependencies by revealing which libraries are actually loaded and utilized during execution"],"chapters":[{"start_ms":230000,"title":"Introduction to Runtime Analysis","summary":"Brian Kelly introduces his background in cybersecurity and the concept of using dynamic application behavior as a data source."},{"start_ms":405000,"title":"Limitations of Static Analysis","summary":"A discussion on how static analysis is becoming commoditized and its inability to detect certain runtime-specific vulnerabilities."},{"start_ms":585000,"title":"The Cost of Unoptimized Code","summary":"How inefficient code patterns, like excessive CPU usage, often fall on SREs to mitigate in production without proper early detection."},{"start_ms":965000,"title":"Reducing the Attack Surface","summary":"Using runtime data to identify and eliminate unused libraries and dependencies to streamline the application."},{"start_ms":1135000,"title":"Integrating with Developer Workflows","summary":"How runtime analysis tools act as low-level instrumentation that works seamlessly with existing IDEs and execution commands."},{"start_ms":1310000,"title":"The Value of Definitive Signals","summary":"The importance of providing developers with concrete, non-predictive data, such as confirmed N+1 query patterns."},{"start_ms":1465000,"title":"The Future of Security and Analysis","summary":"Reflecting on industry shifts toward moving security and performance analysis closer to the developer's daily tasks."}],"topics":["Runtime Analysis","DevOps","Software Development Life Cycle","Application Security","Observability","Static Analysis","Performance Optimization","Kubernetes"],"duration_seconds":2335,"processing_state":"processed","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/arrested-devops/episodes/runtime-analysis-with-brian-kelly/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/arrested-devops/runtime-analysis-with-brian-kelly.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}