Sign up for our newsletter!
Stay informed on the latest DevOps news

DevOps.com

Featured

Video Interviews

GitHub Workflows Strain Under AI Agent Development

GitHub Workflows Strain Under AI Agent Development

|
Coder CEO Rob Whiteley joins Mike Vizard to explain why GitHub workflows, CI/CD pipelines and developer platforms are showing strain …
Watch Now
Trusted Open Source Catalogs for AI and Developers

Trusted Open Source Catalogs for AI and Developers

|
Leslie Pascual of ActiveState joins Alan Shimel to explain why trusted open source catalogs — not after-the-fact scanners — are …
Watch Now

Techstrong TV

Click full-screen to enable volume control
Watch latest episodes and shows

Tech Field Day Events

Upcoming Webinars

Agents of Dev Podcast

Press Releases

Newsletter Sigup

Get the top stories of the week delivered right to your email. Subscribe below!

DevSecOps
TeamPCP Supply Chain Attack Leads to CrowdSec Source Code Being Stolen
CrowdSec says attackers stole source code from about 170 private GitHub repositories after a TanStack npm supply chain attack exposed an OAuth token tied to a former employee ... Read More
TeamPCP Supply Chain Attack Leads to CrowdSec Source Code Being Stolen
|
New npm Threat Bypasses Install Script Protections
|
Harness Previews Revamped Platform for the Agentic Engineering Era
|
AI
AWS Adds Harness to Open Source SDK for Building AI Agents
Amazon Web Services (AWS) this week revealed it has added a harness to the open source software development kit (SDK) it makes available for building artificial intelligence (AI) agents. First introduced last ... Read More
AWS Adds Harness to Open Source SDK for Building AI Agents
|
Cycode Extends DevSecOps Reach to Software Packages Developers Download
|
GitLab Tightens Rate Limits as Coding Agents Drive Demand
|
DataOps
AI, AWS, agents, code, AI, code, spacelift, GitLab, Duo, AI, integrating Generative AI, with DevOps, BMC, generative AI, DevOps workflows, Generative AI, model, low-code/no-code, ChatGPT
Three critical vulnerabilities found in Anthropic’s Claude Code agentic AI developer tool could be exploited simply by cloning and opening an untrusted project and lead to system takeover, stolen API keys, and ... Read More
Security Flaws in Anthropic’s Claude Code Risk Stolen Data, System Takeover
|
Sawmills Emerges From Stealth to Apply AI to Managing Telemetry Data
|
North Korea’s Lazarus Group Targets Developers, Supply Chain
|
Continuous Delivery
New npm Threat Bypasses Install Script Protections
A malicious npm package that has been downloaded millions of times comes with a new way of spreading the malware that makes it easier to bypass security protections, say researchers with security ... Read More
New npm Threat Bypasses Install Script Protections
|
Why Your CI/CD Pipeline Is Your Most Unprotected Attack Surface
|
How I Consolidated Duplicate Delivery Pipelines With Parameters and Build Tags
|
Related Articles
Continuous Testing
Cloud
Enterprise DevOps
DevOps Practices
DevOps Toolbox
DevOps Culture
Latest From DevOps.com
Most Read On DevOps.com
Sponsored Content