Eclipse Foundation Extends Scope and Reach of Open VSX Registry
The Eclipse Foundation launches a new framework for the Open VSX Registry, enhancing security features and transitioning to a hybrid architecture. With support from AI tool provider Cursor, this initiative aims to promote safer software supply chains.
ControlMonkey Extends IaC Automation Reach to Restore Network Services
ControlMonkey has extended its platform for automating infrastructure-as-code (IaC) to add an ability to reprovision network services following a disruption in service. Company CEO Aharon Twizer said this extension to the Cloud Configuration Disaster Recovery platform, which the company launched last year, makes it possible to use Terraform code to programmatically reconfigure networking services among others […]
Postman Adds Ability to Invoke API Code From Within Git Workflows
Discover how Postman’s new feature allows software engineering teams to manage API specifications, collections, and environments directly from Git repositories, simplifying workflows for AI agents in the development process.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Harness Readies Resilience Testing Platform to Make Applications More Robust
Harness today revealed that it will make available a set of open source tools for testing the resiliency of applications that are based on a chaos engineering platform the company gained with the acquisition of LitmusChaos. The Harness Resilience Testing platform extends the scope of the tests provided to include application load and disaster recovery […]
Malicious NPM Package Gets Downloaded 50K Times Before Discovery
A malicious package downloaded approximately 50,000 times from a node package manager (npm) is providing an object lesson for adopting more DevSecOps best practices. Security researchers from Tenable discovered a “ambar-src” package that was first published Feb. 13 and then updated again before being discovered. It is aimed at developers building JavaScript applications on Windows, […]
Arm Aims to Foster Software Engineering Ecosystem
A CoreCollective initiative was launched today, encouraging software developers that build tools and applications that run on Arm processors to work more collaboratively. Created by Arm in collaboration with Linaro, a provider of software engineering services, the CoreCollective ecosystem includes Ampere, Canonical, CIX Technology, Fujitsu, Google, Graphcore, Microsoft, Qualcomm, Red Hat, Samsung and SUSE. Andy […]
OpenTelemetry Is Paving the Way for the Rise of the Observability Warehouse
Eric Tschetter, chief architect at Imply and creator of Apache Druid, explains how the rapid adoption of open source OpenTelemetry for instrumenting applications is reshaping modern observability architectures. As telemetry data volumes surge, organizations are moving toward an “observability warehouse” model that unifies logs, metrics and traces into a scalable analytics foundation capable of delivering […]
AWS Extends Agentic AI Capabilities of Kiro Developer Tool to Improve Code Quality
Amazon Web Services (AWS) has added two additional capabilities to its Kiro artificial intelligence (AI) coding tool that promise to make it simpler to both create higher quality software in the first place and fix any bugs that might have inadvertently been included. At the core of that capability is a specifications-based approach to enabling […]
Harness Makes Registry for Integrating Artifacts into DevOps Workflows Available
Harness today made generally available an Artifact Registry it has added to its portfolio of DevOps tools and platforms. At the same time, Harness also revealed it has added a Dependency Firewall to the registry that enables DevSecOps teams to enforce controls at the point of ingestion. Rather than relying on downstream scans after a […]
Five Great DevOps Job Opportunities
Browse our weekly DevOps jobs report highlighting high-paying DevOps roles from leading companies including Pax8, JPMorgan Chase, Major League Baseball and more. Explore current opportunities and insights into the DevOps job market.
Checkmarx Extends Vulnerability Detection to AI Coding Tool from AWS
Checkmarx this week revealed it has added support for the Kiro artificial intelligence (AI) coding tool provided by Amazon Web Services (AWS) to its Checkmarx Developer Assist that leverages AI to surface vulnerabilities before code is committed. The Checkmarx IDE extension for Kiro is designed to be activated from within the Developer Assist tab that […]
Five Great DevOps Job Opportunities
Explore the latest DevOps jobs from top companies like Wells Fargo, Workday Inc., and HarbourVest with competitive salaries across various locations.
Arcjet SDKs Make It Simpler for Developers to Include Security Functions
Arcjet this week made available a software development kit (SDK) that makes it simpler for JavaScript developers to embed capabilities such as bot detection, rate limiting, email validation, attack protection and data redaction directly within their applications. Company CEO David Mytton said the release of v1.0 of its Arcjet JavaScript SDK makes it possible for […]
CodeHunter API Integrates Deterministic AI Models into DevSecOps Workflows
CodeHunter, a provider of behavioral malware analysis and threat intelligence tools, today announced it is making available an application programming interface (API) to make it simpler to embed the capabilities it provides within a DevSecOps workflow. At its core, CodeHunter makes use of a set of deterministic AI models that it has developed to analyze […]
How AI Helps Teams Track Dependencies and Reduce Delivery Risk
AI is showing up everywhere in software delivery, but project management is where a lot of the real friction lives. Newly appointed Planview CEO Matt Zilli talks through why planning and delivery still break down inside modern organizations, even when teams have more data and more tools than ever. Zilli’s point is simple: the problem […]
Rein Security Emerges to Analyze Reachability of Application Vulnerabilities
Rein Security has emerged from stealth to launch an application security platform capable of determining the reach of a vulnerability based on which libraries and application programming interfaces are actually running in a production environment. Fresh off raising $8 million in seed funding. Rein Security CEO Matan Bar Efrat said DevSecOps teams can now gain […]
CodeRabbit Adds DevOps Planning and Review Tool for AI Prompts
CodeRabbit today made available in beta a planning tool that enables DevOps teams to determine which artificial intelligence (AI) prompts to create and review before embedding them within their workflows. David Loker, vice president of AI for CodeRabbit, said CodeRabbit Issue Planner will enable DevOps teams to collaboratively apply AI to workflows versus relying on […]
Survey: Java Developers Wrestling With Massive Amounts of Technical Debt
A global survey of 2,039 Java developers published today finds 63% reporting that dead and unused code adversely affects their team’s productivity, with 22% describing the impact of that technical debt as being severe. Conducted by Dimensional Research on behalf of Azul, a provider of a distribution of OpenJDK, the survey also finds that more […]
Five Great DevOps Job Opportunities
This week’s report features top employers including Capital One, Google, CLS US Services, Thrive Market, and Cisco Systems, providing insights into the job market and salaries for crucial roles in DevOps.
Veracode Extends Package Firewall Reach to Microsoft Artifacts
Veracode has extended the reach of a Package Firewall that applies policies that limit what types of code can be downloaded from a repository to Azure Artifacts from Microsoft. Additionally, DevSecOps teams can now define custom policies based on package risk profiles, vulnerability thresholds, or a specific security requirement their organization has adopted. Tim Jarrett, […]
How AI Is Expanding Who Gets to Build Infrastructure
Pavlo Baron, co-founder and CEO of Platform Engineering Labs, unpacks what’s changing in platform engineering as AI reshapes who gets to build, and how infrastructure actually gets managed. Baron traces the origin story back to his time building high-scale systems at Instana (which exited to IBM in 2020), where the reality of “always-on” platforms made […]
Qodo Adds Multiple AI Agents to Code Review Platform
Qodo 2.0 adds memory-enabled, task-specific AI agents to its LLM-based code-review platform, improving defect recall and F1 performance to help DevOps scale code quality as AI-generated code rises.