swampUP 2019

Industry requirements and regulations add complexity to the release process for medical systems. Together with Siemens Healthineers Point of Care, we have significantly accelerated release cycles of their software platform for their next generation medical devices, with Artifactory sitting at the center of the scene.

In this presentation we will convey experiences in building Continuous Integration (CI) pipelines for a functional safety project in the Embedded Medical (FDA/62304) market as a result of a major project at Siemens Healthineers Point of Care.

An overview of the implemented pipelines will be shown that enable higher levels of compliance, testing, quality and security. By applying an innovative process, “T(x) - Isolate, Verify, Merge", we will show an optimized workflow to paying technical debt up-front and as early as possible in the development process. Artifactory has become a central piece to the delivery process and is used in multiple contexts, from managing build artifacts, to automating configuration and infrastructure, and serving as a proxy for a strict internal R&D network.

1. Experience from automating the delivery process of a software platform to product teams
• Point of Care are pioneering their industry through building a reusable platform for their product lines to build on top of. This raises a technical challenge with sharing build artifacts from the platform development team with the product lines and reusing automated tests as much as possible
2. How Configuration as Code was used to simplify the build environment and minimize the possibility of configuration drift across build environments
• How Artifactory was setup as a repository containing all build tools and dependencies and Gradle was used to automate the provisioning of a build environment
3. Utilizing a number of technologies for automating infrastructure and configuration for the automated pipelines
• Repositories used for delivery pipeline: Gradle, NPM, Docker, Nuget (Chocolatey), Ubuntu, Debian, Generic