
OpenSSF Defines Baseline for Securing Open Source Software
The Open Source Security Foundation (OpenSSF) has launched an initiative to provide maintainers of open source software projects with a set of baseline security requirements that can be realistically attained and maintained by small teams.

Five Great DevOps Job Opportunities
The five DevOps engineer job postings shared this week include roles at Cox Communications, Whatnot and AccreteAI.

Apollo GraphQL Delivers on Promise to Integrate REST APIs
Apollo GraphQL has made generally available a set of connectors for REST application programming interfaces (APIs) that make it possible to use its GraphQL-based platform to declaratively integrate workflows and processes.

Legit Security Extends ASPM Platform to Provide More Vulnerability Context
Legit Security this week added an ability to determine the level of risk a vulnerability actually represents to its application security posture management (ASPM) platform.

Black Duck Analysis Surfaces Raft of Open Source Software Vulnerabilities in Code Bases
An analysis of 965 commercial codebases across 16 industries conducted in 2024 finds 86% of commercial codebases evaluated contained open-source software vulnerabilities, with 81% of them known to be high- or critical risks.

New Relic Infuses Additional AI Capabilities into Observability Platforms
New Relic today added more than 15 additional capabilities to its observability platform, including retrieval augmented generation (RAG) tools, which are all enabled to one degree or another by artificial intelligence (AI).

Teleport Unifies Infrastructure and Application Workload Security
Teleport today added an offering that makes it simpler to declaratively secure IT infrastructure and workloads using short-lived X.509 certificates.

GitLab Makes Self-Hosted Edition for AI Platform for DevOps Available
GitLab is now making generally available an edition of the company’s Duo DevOps platform infused with artificial intelligence (AI) capabilities for self-hosted IT environments.

Five Great DevOps Job Opportunities
The five DevOps job opportunities posted this week are all engineer roles and companies include Costco wholesale and Northrop Grumman.

Endor Labs Extends Microsoft SCA Alliance to GitHub
Endor Labs has allied with GitHub to integrate its software composition analysis (SCA) tools directly within DevOps workflows.

Sawmills Emerges From Stealth to Apply AI to Managing Telemetry Data
Sawmills today emerged from stealth to launch a platform that makes use of artificial intelligence (AI) models to manage telemetry data more cost-effectively.

Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]

DataRobot Acquires Agnostic to Gain Distributed Covalent Platform for AI Apps
DataRobot,a provider of a platform for building artificial intelligence (AI) applications, this week acquired Agnostic, a provider of an open source distributed computing platform, dubbed Covalent, that will be integrated with its machine learning operations (MLOps) framework. Based on Python, Covalent is an orchestration platform that provides IT teams with a serverless computing framework that […]

Harness Merges with Traceable to Provide Integrated DevSecOps Platform
Harness today announced that Traceable will be merged into the company to create a combined company that will further advance the adoption of best DevSecOps practices across the software development lifecycle (SDLC).

AWS Extends AI Agent Reach into the Realm of Testing Code
AWS has extended the reach of its generative artificial intelligence (AI) agents for developers into the realm of application testing.

Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]

Digma Adds Ability to Predict Coding Issues to Observability Platform
Digma this week added a predictive analytics capability to its observability platform that makes it possible to identify issues before code is added to a production environment.

Open Source Software Security Concerns with Spike Curtis
Spike Curtis, principal engineer for Coder Technologies, dives into why open source software security concerns are valid, and why the only viable option is to invest more in securing software supply chains to mitigate potential threats. While open source benefits from community oversight, organizations must vet the projects they rely on to avoid security gaps. […]

Anjali Arora on DevOps Teams Embracing Platform Engineering
Anjali Arora, chief technology officer at Perforce Software, discusses the inefficiencies in DevOps infrastructure and the role of platform engineering in addressing them. She notes the shift from traditional IT-managed infrastructure to DevOps-driven provisioning, and how it’s led to a fragmented and costly environment. To counter this, organizations are turning to platform engineering to strike […]

Copado Adds Support for Salesforce Data Cloud to DevOps Platform
Copado this week extended the reach of its DevOps platform to include the Salesforce Data Cloud service, which is at the core of the artificial intelligence (AI) agents that Salesforce hopes organizations will build and deploy on its platforms.

Survey: Increased Tool Sprawl Saps Developer Productivity
A survey of 300 IT professionals working in software engineering departments in the U.S. and Western Europe that have more than 150 developers, finds 75% are losing anywhere from six to 15 hours a week because of tool sprawl as respondents on average navigate 7.4 tools to build applications.

Dynatrace Extends AI Reach to Bridge DevOps Divide
Dynatrace, today at its Perform 2025 conference, extended the reach of its Davis artificial intelligence (AI) engine to provide predictive and generative capabilities that complement the causal analytics already provided. Additionally, Dynatrace unveiled an Observability for Developers module for its platform that includes a Live Debugger tool that will be made generally available in 90 […]

Five Great DevOps Job Opportunities
Game on. Our round-up of the DevOps job market this week includes a DevOps and SRE role with Boston Red Sox and Fenway Sports Management.
