Business of DevOps
Elevating Technical Documentation: Using Predictive AI to Standardize Visual Knowledge Bases
Nazim Ghori | | AI documentation, AI visual validation, architecture diagrams, CI/CD documentation, computer vision, developer documentation, developer experience, devops automation, DevOps documentation, documentation automation, documentation drift, documentation quality, documentation quality gates, Git workflows, knowledge bases, OCR, predictive AI, screenshot validation, technical documentation, visual validationEvery release changes documentation alongside the code. Developers depend on that documentation during implementation, maintenance and troubleshooting. A diagram becomes misleading once services are renamed or integrations change without a corresponding documentation ...
Adronite Unveils AI Coding Tool Based on Embedded Context Engine
Mike Vizard | | ACE, Adronite, Adronite Context Engine, AI code generation, AI coding assistants, AI coding tool, AI-generated code, code review, codebase context, Codistry, developer tools, devops, open-weight AI models, software development, token efficiencyAdronite launches Codistry, an AI coding tool that uses a context engine to map codebases, reduce token usage and generate more production-ready code ...
The Agent Proposes, the Pipeline Disposes: Controls for AI-Authored Change
Veera Ravindra Divi | | agent permissions, agentic coding, AI change control, AI code review, AI coding agents, AI Governance, AI pull requests, AI software development, AI-authored code, AI-generated code security, autonomous coding agents, bounded-write agents, change-budget gates, CI/CD security, human-in-the-loop, in-toto, independent evals, least-privilege, policy as code, protected paths, provenance attestation, provenance verification, Secure DevOps, signed attestations, Sigstore, SLSA, Software Supply Chain Security, staged autonomyWhen agents write code and open pull requests faster than humans can read them, ‘the diff looked fine’ stops being a control. The durable controls live outside the agent’s reasoning loop ...
What You Cannot See Will Break Your LLM App: A Practitioner Guide to Production Observability
Gourav Singla | | AI monitoring, AI observability, AI quality monitoring, automated AI evaluation, Distributed Tracing, finish reason, hallucination monitoring, LLM cost observability, LLM latency, LLM monitoring, LLM observability, LLM tracing, model-graded evaluation, OpenTelemetry GenAI, OTel GenAI, production AI reliability, production LLMs, prompt failures, prompt regression, provider monitoring, quality drift, token budget alerting, token cost monitoringTraditional application observability was built around a simple mental model: Your code runs, metrics come out and when something breaks, the logs tell you why. Large language models (LLMs) break that model ...
Fast-Moving Shai-Hulud Attack Infects npm Packages with 2 Billion Monthly Downloads
Jeff Burt | | Aikido Security, AWS, credential theft, GitHub Actions, HashiCorp Terraform, npm malware, Shai-Hulud worm, supply chain attackResearchers at Aikido Security and Endor Labs are tracking a fast-spreading supply-chain attack that is compromising a wide range of npm software packages that combined have more than 2 billion installs a ...
AI is Coding Us Into a Corner
Charlie Gero | | AI coding tools, AI dependency, AI hallucinations, AI patching, AI-generated code, application security, code review, code vulnerabilities, developer productivity, developer trust, frontier models, future software maintenance, Human Oversight, junior developers, secure coding, software engineering skills, software security, technical debtAI-powered patching and coding is putting us on a track towards a deepening dependency on future frontier models. The modern tools we use today to fix yesterday’s coding problems are quietly creating ...
Shift Left Security: 4 Automated Security Gates in GitHub Actions
Zia Ullah | | automated security testing, CI/CD security gates, CodeQL, container image scanning, CVE detection, DAST, dependency scanning, DevSecOps pipeline, Dynamic Application Security Testing, GitHub Actions security, Node.js security, npm audit, OWASP ZAP, SAST, shift left security, Snyk, Software Supply Chain Security, Static Application Security Testing, Trivy, vulnerability scanningLearn how to add four automated security gates to GitHub Actions using npm audit, Snyk, Trivy, CodeQL and OWASP ZAP—without an enterprise licence ...
Microsoft Confirms Copilot ‘Super App’ Is Coming This Year — and It’s About More Than Convenience
Tom Smith | | Agent 365, agent sprawl, AI agents, AI identity management, autonomous agents, Copilot Chat, Copilot Code, Copilot consolidation, Copilot Cowork, enterprise AI governance, GitHub Copilot, Microsoft 365 Copilot, Microsoft Autopilots, Microsoft Copilot super app, Microsoft Entra Agent ID, One CopilotMicrosoft is combining Copilot Chat, Code, Cowork and Autopilots into one super app, raising new questions about agent governance, identity, licensing and security ...
JetBrains Open-Sources KotlinLLM, a Research Prototype for Runtime Code Generation
Tom Smith | | agentic AI, AI coding tools, Apache License 2.0, asLlm, generative AI, IntelliJ IDEA plugin, JetBrains Research, Kotlin, Kotlin/JVM, KotlinLLM, LLM-generated code, mockLlm, persistent code generation, reviewable AI code, runtime code generation, Smart macros, software development, statically typed programmingJetBrains open-sources KotlinLLM, letting compiled Kotlin apps generate and persist LLM-written code at runtime instead of calling a model live ...
GitHub Brings Stacked Pull Requests Out of the Shadows
Tom Smith | | AI coding agents, branch protection, code quality, code review, continuous integration, developer productivity, DevOps workflows, gh-stack, GitHub Copilot, GitHub public preview, GitHub stacked pull requests, merge queues, pull request size, software engineering, Stacked PRsGitHub introduces native stacked pull requests, helping development teams break large changes into smaller, dependency-ordered PRs that are faster and easier to review ...
CISA’s 2026 SBOM Guidance Adds Hash Requirements and AI Coverage
Tom Smith | | AI supply chain security, CISA, CISA SBOM 2026, CMMC, component hashes, component licensing, continuous SBOM validation, CycloneDX, FBI, FedRAMP, NSA, open source security, SaaS security, SBOM automation, SBOM minimum elements, software bill of materials, software procurement, Software Supply Chain Security, software transparency, SPDX, vendor risk managementCISA’s updated 2026 SBOM minimum elements expand software transparency requirements to AI, SaaS and open source while adding hashes, licenses and stronger validation ...
GitHub Gives Teams More Control Over Copilot’s Cloud Agent in Linear
Tom Smith | | agent guidance, agentic coding, AI coding agent, AI development workflow, automated pull requests, branch controls, Copilot cloud agent, custom coding agents, devops automation, engineering productivity, GitHub Actions, GitHub Copilot, GitHub Marketplace, Linear integration, Linear issues, mid-session steering, model selection, software development agentsGitHub’s Copilot cloud agent integration with Linear is now generally available, adding model, branch and team-level controls for delegated coding work ...
