Business of DevOps
Developer Experience: Overcoming 6 AI-Induced Challenges
Yaniv Sayers | | AI challenges in DevEx, AI in software development, AI model, AI productivity, AI tool fragmentation, AI trust issues, cognitive overload, developer experience, devex, explainable AI, hybrid AI architecturesThe use of artificial intelligence brings high hopes and expectations in the technological world, promising changes to the way businesses operate. A staggering 79% of companies are now or will be using ...
Common IaC Security Issues and How to Fix Them
Durojaye Olusegun | | audit logging, automated compliance, CI/CD pipeline security, cloud infrastructure, cloud misconfiguration, cloud security incidents, CloudFormation, configuration drift, devsecops, drift detection, hardcoded secrets, IaC automation, IaC best practices, IaC governance, IaC security, IaC vulnerabilities, infrastructure as code, least privilege access, policy as code, secrets managementLearn the top five Infrastructure as Code (IaC) security vulnerabilities, their fixes, and best practices to prevent misconfigurations, drifts, and breaches ...
How Can the Usage of AI Help Boost DevOps Pipelines
Joydip Kanjilal | | AI for testing automation, AI in CI/CD, AI in DevOps, AI in software development, AI-based DevOps tools, AI-driven CI/CD pipelines, AI-driven software delivery, AI-powered CI/CD, automated security testing, continuous deployment, continuous integration, devops automation, devsecops, Future of DevOps, intelligent automation, intelligent DevOps pipelines, machine learning in DevOps, predictive DevOps, Self-Healing Pipelines, smart deploymentsAI is revolutionizing DevOps by making CI/CD pipelines smarter, self-learning, and more efficient — enabling faster, secure, and automated software delivery ...
Five Great DevOps Job Opportunities
Mike Vizard | | AI DevOps, Cloud Engineering, DevOps careers, DevOps hiring, devops jobs, DevOps market insights, DevOps professionals, devsecops, job report, Remote DevOps, tech salariesA weekly DevOps Jobs Report featuring opportunities, salaries and insights into the DevOps job market from companies like NVIDIA and GEICO ...
Build vs. Buy: What it Really Takes to Harden Your Software Supply Chain
Matt Moore | | CI/CD security, container registry security, container vulnerabilities, devsecops, hardened images, Kubernetes security, secure build pipelines, Software Supply Chain SecurityWhen it comes to securing the software supply chain, engineering teams often assume that the choice between building their own hardened images or buying a solution is straightforward…until they try to build the ...
Shortcut Adds AI Agent to Orchestrate Management of Software Development Projects
Mike Vizard | | AI agents for software development, AI in project tracking, AI project management, AI-powered product management, devops automation, Jira alternative, natural language to project plans, software engineering productivity, workflow orchestrationShortcut this week added an artificial intelligence (AI) agent that is capable of orchestrating the planning, tracking and coordination of software projects. Company CEO Kurt Schrader said the Korey agent takes ideas ...
Why Automation Fails Without the Right QA Mindset
Imtiaz Shaik | | CI/CD Automation, continuous testing, devops best practices, DevOps Testing, Exploratory Testing, human-in-the-loop QA, QA mindset, QA vs automation, quality assurance strategy, regression testing, risk-based testing, shift-left testing, software quality, test automation, test maintainability, user experience testingIn the DevOps world, with its faster release cycles and continuous delivery, quality assurance (QA) cannot be sidelined until the end of the process. Companies that actively use automation achieve up to 60% faster ...
Worms in the Supply Chain: Shai-Hulud and the Next DevOps Reckoning
Jenn Yarnold | | artifact provenance, CI/CD security, continuous verification, credential theft, devops security, devsecops, GitHub tokens, npm malware, OIDC, pipeline security, SBoM, Secure software delivery, Shai-Hulud worm, short-lived tokens, Software Supply Chain, supply chain attackDevOps was supposed to make software delivery faster, safer and more reliable. For the most part, it has. But every so often, something nasty crawls out of the shadows and reminds us ...
How Model Context Protocol (MCP) is Fueling the Next Era of Developer Productivity
Mohith Shrivastava | | AgentExchange, agentic AI, AI Development, AI ecosystem, AI Governance, AI interoperability, AI protocols, AI standards, AI tool integration, devops, enterprise AI security, MCP, Model Context Protocol, open AI standards, Salesforce Agentforce, vibe codingMCP standardizes how AI agents connect to tools and data, solving fragmentation in AI development with secure, reusable, and scalable integrations ...
DORA 2025: Faster, But Are We Any Better?
Jenn Yarnold | | AI-assisted software development, amplification, culture & practices, developer productivity, DORA research, organizational systems, research report, strategic AI investmentThe 2025 DORA Report — The State of AI-assisted Software Development by DORA / Google Cloud — introduces the DORA AI Capabilities Model, arguing that AI functions best as an amplifier of ...
Five Great DevOps Job Opportunities
Mike Vizard | | career advancement, career opportunities, DevOps jobs report, DevOps professionals, economic challenges, job market insights, salary ranges, talent shortageDevOps.com continues to provide a weekly jobs report to highlight career opportunities for DevOps professionals and opportunities highlighted this week include roles at NMI, HiBob and FloQast ...
How GitHub Plans to Secure npm After Recent Supply Chain Attacks
Tom Smith | | API token deprecation, CI/CD authentication, crates.io security, npm 2FA, npm registry attack, npm token theft, open source security, package registry malware, PyPI trusted publishing, Shai-Hulud worm, Software Supply Chain Security, trusted publishingGitHub strengthens npm security after Shai-Hulud worm attack with mandatory 2FA, granular tokens, and trusted publishing to protect the open source supply chain ...
