Latest Articles
These are 10 CI/CD Pipeline Mistakes That Slow Down Engineering Teams
Sandeep Kumar Khandelwal | | CI/CD, CI/CD pipelines, continuous delivery, continuous integration, devops, pipeline automationContinuous software delivery in the digital age has come to depend on CI/CD pipelines. They enable engineering teams to rapidly develop, test, and deploy code while keeping it highly usable and consistent ...
Black Duck Extends Scope and Reach of Code Scanning Tool
Black Duck has updated its Coverity static analysis code scanning tool to provide deeper integrations with artificial intelligence (AI) tools along with updates to its user interface that make it simpler to ...
The End of Manual Triage
Neel Shah | | agentic SRE, AI-powered SRE, Aiden for SRE, alert enrichment, automated diagnosis, automated incident triage, Datadog Bits AI, distributed systems reliability, incident investigation, incident response automation, machine-assisted triage, manual incident triage, MTTR reduction, observability correlation, observability-first design, on-call engineering, operational context, progressive automation, root cause analysis, Rootly, SRE architecture, SRE automation, telemetry correlationWhy SRE teams are replacing manual incident triage with AI-assisted correlation, stronger observability and controlled agentic workflows ...
AI Agents Are Writing Your Infrastructure Code. Is Anyone Governing It?
Neel Shah | | agentic infrastructure, AI agent governance, AI coding assistants, AI-generated infrastructure, cloud misconfiguration, cloud security automation, continuous drift detection, devops security, IAM misconfiguration, infrastructure as code security, infrastructure compliance, infrastructure guardrails, Kubernetes security, platform engineering security, policy as code, RBAC for AI agents, secure-by-default platforms, SRE governance, StackGen Aiden, Terraform securityAI agents now generate infrastructure code at scale, but security pass rates are stuck at 55%. Here’s how teams can close the governance gap ...
Building SOC 2 Compliant CI/CD Pipelines on AWS with GitHub Actions
Artur Yolchyan | | Amazon ECR security, artifact traceability, AWS CI/CD pipeline, AWS compliance, AWS deployment pipeline, AWS multi-account architecture, CC6.1 access controls, CC7.1 vulnerability management, CC8.1 change management, container image promotion, cross-account ECR access, DevOps compliance, ECR lifecycle policies, ECR repository architecture, ECR scan on push, GitHub Actions OIDC, immutable artifacts, Secure software delivery, SOC 2 change management, SOC 2 CI/CDHow to design a secure, traceable AWS CI/CD pipeline using separate accounts, centralized ECR, OIDC and immutable image promotion for SOC 2 ...
From Reactive Monitoring to AI-Driven Operational Intelligence
Sneha Gullapalli | | AI observability, Amazon Q, Apache Iceberg, automated root cause analysis, AWS CloudWatch, AWS operations, CloudWatch Logs, DevOps observability, Distributed Tracing, Five Whys, GenAI observability, incident response, LLM monitoring, log lake, MTTR reduction, operational intelligence, proactive monitoring., RAG latency, S3 Tables, token usage monitoringTraditional monitoring often meant chasing alerts and toggling between dashboards after an issue had already impacted users. AWS CloudWatch — long the backbone of metrics, logs and traces on AWS — is ...
AI-Assisted Development Under Deadline: What It Takes to Ship Production Code on an Unfamiliar Stack
Ihor Riazantsev | | AI code risk, AI coding tools, AI-assisted development, AI-generated code, Claude Code, code consistency, code review, devops teams, engineering discipline, feature isolation, manual testing, memory leak debugging, Next.js development, production readiness, production validation, production-ready code, rapid feature delivery, React development, software architecture, software engineering judgment, technical debt, TypeScript development, unfamiliar codebaseHow Claude Code accelerated development on an unfamiliar stack while proving that production-ready AI-generated code still requires human judgment ...
When the Message Broker Becomes the Bottleneck: Scaling Push and SMS With MongoDB Polling
Pavel Zavialov | | asynchronous processing, atomic task claiming, backend engineering, database-backed queue, dead-letter queue, distributed systems, Go microservices, idempotency, , microservices architecture, MongoDB performance, MongoDB polling queue, notification architecture, notification service, push notifications, RabbitMQ scaling, retry strategy, Ruby monolith, SMS delivery, Wheely engineeringA back-end team extracted notification delivery from a large Ruby monolith into a centralized Go service, only to discover that their shared RabbitMQ cluster could not reliably support the new workload. Here's ...
FakeGit Targets AI Coding Agents with Malicious GitHub Repos
Jeff Burt | | AgentBaiting, AI coding agents, AI supply chain risk, Anthropic Claude Code, fake repositories, FakeGit, github, Google Gemini, Island, MCP Server, OpenAI ChatGPT, SmartLoader, StealCThreat actors continue to find new ways to incorporate AI into schemes aimed at luring developers into downloading malware from fake repositories. The latest example involves almost 7,600 malicious GitHub repositories that ...
AI-Native Testing Is Now a Core Quality Engineering Discipline
Saqib Jan | | agentic AI, AI-native Testing, Model Context Protocol, Quality Engineering, software testing, test automationPredictions from some of the most prominent voices in the technology industry suggest that software engineering could become increasingly obsolete within a year, jolting the developer community in ways that are still ...
New Copilot Dashboard Shows Enterprises Which Developers Are Actually Using AI — Not Just Who’s Logged In
GitHub's new Copilot dashboard shows enterprises which developers use AI deeply — turning adoption data into a real productivity business case ...
Building Reliable EMR Pipelines With Custom AMIs and Step Functions
The goal is not custom AMIs for every workload. It is to make dependency management, patching and recovery explicit platform responsibilities rather than repeated job-level tasks ...
