Business of DevOps
Secrets Sprawl and Rotation: A Practical Vault Management Playbook
Oreoluwa Omoike | | AI security, AI-assisted coding, API Key Security, AWS Secrets Manager, Azure Key Vault, CI/CD security, Cloud Security, credential exposure, Credential Rotation, Data Breaches, devsecops, Dynamic Secrets, GitGuardian, GitHub security, Google Secret Manager, hardcoded secrets, HashiCorp Vault, least-privilege, MCP Security, Model Context Protocol, non-human identities, secrets management, secrets sprawl, Security Boulevard, Terraform securityIn 2025 alone, security firm GitGuardian detected 28.65 million new hardcoded secrets exposed in public GitHub commits — a 34% increase year over year and the largest single-year jump the company has ...
Coding Agents Broke Git’s Scaling Math. GitHub Is Rebuilding to Keep Up
Tom Smith | | agentic AI, AI coding agents, automation, Azure Blob Storage, CI/CD, code review, developer productivity, devops, GIT, Git Infrastructure, github, GitHub Actions, platform engineering, Repository Scaling, software development, software engineering, Trunk-Based DevelopmentGitHub is rebuilding its Git infrastructure as AI coding agents drive billions of commits, promising up to 35x faster writes while exposing new DevOps bottlenecks ...
HackerOne Report Surfaces Massive Increase in Vulnerability Backlogs
Mike Vizard | | AI security, AI vulnerability discovery, application security, appsec, bug bounty, cyber risk, Cybersecurity, devsecops, exploit development, exposure debt, HackerOne, output handling, prompt leakage, remediation backlog, security researchers, software security, vulnerability backlog, vulnerability management, vulnerability remediation, VulnOpsHackerOne research shows vulnerability remediation is getting faster, but AI-driven discovery is expanding exposure debt even more quickly, putting DevSecOps teams under growing pressure ...
Federated Query at Petabyte Scale: A Deployment Pattern for a Governed AI-Agent Data Layer
Pavan Gatadi | | AI agents, AI Governance, CI/CD, data architecture, data governance, data products, devops, distributed SQL, enterprise data, enterprise GenAI, federated query, HIPAA, kubernetes, MCP, observability, regulated data, role-based access control, semantic layer, Starburst, Terraform, TrinoA federated query architecture can reduce data duplication and latency while creating a governed, auditable data layer that enterprise AI agents can safely access ...
DevOps Dozen 2026 Nominations Are Open: Recognizing the People and Technology Moving DevOps Forward
Alan Shimel | | agentic AI, AgentOps, AI software development, CI/CD, developer productivity, DevOps 2026, DevOps awards, devops dozen, DevOps Dozen Awards, devsecops, FinOps, internal developer platforms, LLMOps, MLOps, observability, open source, platform engineering, software delivery, Software Supply Chain SecurityWhen we launched the DevOps Dozen in 2015, we wanted to recognize the people, projects and companies helping this community move forward. We saw the work happening across DevOps every day at ...
Introducing Futurum Media: Why Futurum, Why Now?
Alan Shimel | | ai, analyst research, cloud-native, devops, devops.com, enterprise technology, Futurum Group, Futurum Media, go to market, market intelligence, platform engineering, Tech Field Day, technology media, technology research, TechStrong, Visible ImpactTechstrong, Tech Field Day and Visible Impact come together, backed by the research, intelligence and expertise of The Futurum Group ...
env zero Previews Control Plane for Agentic DevOps Workflows
Mike Vizard | | agentic AI, AI agents, AI Governance, autonomous remediation, cloud infrastructure, CloudQuery, CMDB, devops, devops automation, env zero, EZ Control, IaC, infrastructure as code, infrastructure drift, kubernetes, MCP, platform engineeringenv zero’s EZ Control introduces an agentic DevOps control plane that detects infrastructure drift, applies policy-driven remediation and keeps automated changes attributable, reversible and auditable ...
GitHub’s Security Autofix Agent Now Remembers What It Fixed
Tom Smith | | agentic autofix, AI coding agents, AI security, application security, code scanning, CodeQL, Copilot Memory, devsecops, github, GitHub Advanced Security, GitHub Copilot, repository memory, secure coding, vulnerability remediationGitHub’s agentic autofix now uses Copilot Memory to reuse repository-specific security fix patterns, helping Copilot apply lessons from past vulnerabilities across future alerts, reviews and coding workflows ...
Dependency Mocking Approach That Gets More Accurate as Your Services Deploy More Often
Sancharini Panda | | API testing, CI/CD, Contract Testing, Dependency Mocking, devops, ebpf, integration testing, Keploy, microservices, Mock Drift, service virtualization, software testing, test automation, Testcontainers, Traffic-Based MockingTraffic-based dependency mocking turns frequent upstream deployments into opportunities to refresh mocks from real behavior and reduce integration test drift ...
Why Old Azure DevOps Releases Survive a Pipeline Cutover
Ahmed Tariq | | Azure DevOps, Azure DevOps Classic, Azure pipelines, CI/CD, container security, deployment automation, devops, devsecops, Helm, kubernetes, Kubernetes security, Pipeline Migration, release management, Release Pipelines, software deliveryOld Azure DevOps Classic releases can retain retired deployment tasks, Helm names, image paths and variables long after a pipeline cutover, leaving stale redeploy paths active ...
TeamPCP Supply Chain Attack Leads to CrowdSec Source Code Being Stolen
Jeff Burt | | CrowdSec, EDR, github, Mini Shai-Hulud, NPM security, OAuth tokens, supply chain attacks, TanStack compromise, TeamPCPCrowdSec says attackers stole source code from about 170 private GitHub repositories after a TanStack npm supply chain attack exposed an OAuth token tied to a former employee ...
Cycode Extends DevSecOps Reach to Software Packages Developers Download
Mike Vizard | | ADLC, agentic development lifecycle, AI coding agents, cool down period, Cycode, dependency security, Developer Security, devsecops, malicious packages, package security, software repositories, Software Supply Chain Security, supply chain attacks, threat intelligence, workstation protectionCycode is adding workstation-level protection to stop developers and AI coding agents from downloading malicious or insufficiently vetted software packages ...
