Business of DevOps
xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos
Tom Smith | | AI agent governance, AI coding agent, Apache 2.0, credential exposure, developer privacy, devops security, github, Grok Build, open-source coding agent, Repository Security, source code security, xAIxAI has published the full source code for Grok Build, its terminal-based AI coding agent, on GitHub under an Apache 2.0 license. The release lands three days after a security researcher showed ...
HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform
Tom Smith | | Cloud Security, compliance automation, Hashicorp, HCL, HCP Terraform, infrastructure as code, Infrastructure Governance, OPA, Open Policy Agent, platform engineering, policy as code, Sentinel, Terraform, tfpolicyHashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks ...
Anaconda Doesn’t Want to Be Just the Python Company Anymore
The question is no longer whether Anaconda wants to be more than the Python company. It is how much of the AI development stack DeSanto ultimately intends to own ...
GitHub API Abuse, ‘Ghost’ Accounts Part of Malicious Efforts to Map Organizations
Jeff Burt | | Cofense, Data Exfiltration, data mapping, data scraping, datadog, Fortran, GitHub API, GitHub ghost accounts, gitlab, GraphQL, personal tokens, REST APIsDatadog researchers uncover months-long overlapping campaigns to scrape data about companies and their developers ...
IBM Bob Gets Multi-Agent Muscle and a Cost Dashboard for Enterprise Coding
IBM Bob adds multi-agent coordination, cost analytics, and modernization workflows for IBM Z, IBM i, and Java as AI governance takes center stage ...
SpaceXAI’s Grok 4.5 Undercuts Anthropic and OpenAI on Coding Agent Pricing
SpaceXAI's Grok 4.5 undercuts Opus 4.8 on price, matching it on key coding benchmarks, and adds new safeguards against cybersecurity risks ...
Enterprise Smart Contracts Have a Cryptography Problem. EY Just Built a Way Around It
The business case for smart contracts is building fast. Major financial institutions are using programmable, code-based agreements to underpin financial workflows, supply chain operations, and tokenization initiatives. Developers are being asked to ...
Multi-Model AI Debate: The New Way to Design Software Systems
How agentic workflows can automate architecture debates, compare tradeoffs and produce stronger software designs ...
How to Build a DevSecOps CI/CD Pipeline on Azure With GitHub Actions
Fix security problems when they’re cheap to fix, which is before the code is deployed. A pipeline that enforces this automatically is what makes that principle real ...
Shadow Mode Continuous Integration: The Missing Test Layer for AI Agents
Autonomous agents require CI/CD pipelines that evaluate behavior, not just artifacts. Containerized shadow mode gives platform teams a practical control point: Run the agent in an isolated Docker environment, replay realistic workflows, ...
From Alerts to Intelligence: Building a Production Self-Healing System for Port-Down Failures
Big, distributed computing systems seldom have visible failures. Most of them start without any bang, frequently with a health-check disconnection, a failed TCP connection or a service port that is no longer ...
Self-Healing Infrastructure With Cognitive Automation: How LLMs and Ansible Transform Middleware Reliability
Infrastructure reliability has always been central to enterprise success, yet traditional automation methods often fall short in handling complex, dynamic environments. With the rise of large language models (LLMs), a new paradigm ...
