Continuous Delivery
Novee Uncovers Cordyceps: The Latest Threat to CI/CD Pipelines
Jeff Burt | | AI coding agents, apache, CI/CD security, Cloudflare, code repositories, Cordyceps, GitHub Actions, google, microsoft, Novee, npm malware, PyPi, Python, supply chain attacks, WizA newly discovered supply chain security flaw is once again putting a spotlight on inherent weaknesses in CI/CD pipelines and the growing interest among cyberthreat actors to exploit them. Security researchers with ...
These are 10 CI/CD Pipeline Mistakes That Slow Down Engineering Teams
Continuous software delivery in the digital age depends on CI/CD pipelines, which enable engineering teams to rapidly develop, test, and deploy code while maintaining high usability and consistency across environments ...
Mastering the Blast Radius, Deployment Without Fear- Progressive Delivery in Modern DevOps
‘Progressive delivery’ is the modern evolution of continuous delivery, designed to reduce the blast radius of new features and decouple ‘deployment’ (moving code to production) from ‘release’ (exposing features to users) ...
Shift-Left Performance Testing in CI/CD: A Practical LoadRunner Framework
CI/CD pipelines speed up software delivery, but performance testing is often delayed, resulting in late feedback and costly fixes. Many teams run tests earlier but fail to enforce performance as a deployment ...
Security Flaw in Claude Code Illustrates the Risk of AI in Developer Workflows
Jeff Burt | | agentic AI in development, Anthropic Claude Code, bash, CI/CD and AI agents, exposed secrets, GitHub Actions, microsoft, prompt injectionAI coding agents are reshaping software development—but they’re also expanding the attack surface. Researchers uncovered a now-patched vulnerability in Anthropic’s Claude Code GitHub Action that could have enabled prompt injection attacks to ...
Why DIY Test Automation Succeeds Its Way Into a Problem
Rohit Raghuvansi | | AI Development, DIY Test Automation, Quality Engineering, software testing, test automationAsk any engineering team if they can build their own test automation framework, and the answer is almost always “yes.” With modern AI tools involved, that answer arrives faster and with more ...
Designing an AI-Powered DevSecOps Guardrail Pipeline Using GitHub Actions
By embedding AI-powered guardrails directly into CI/CD pipelines, organizations can detect vulnerabilities earlier, enforce security policies automatically and accelerate secure software delivery. ...
Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable
Jeff Burt | | Aqua Security Trivy, CI/CD cyberthreats, exposed secrets, GitHub Actions, IANS Research, malicious code, microsoft, OWASP Top 10, remote code execution, software development security, software supply chain attacks, software vulnerabilities, TenableA critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and gain access to secrets, ...
Can Claude Agents Replace DevOps Teams? A Practical Reality Check
Sannan Ali | | adaptive systems, Agentic Workflows, AIOps, automated deployments, Autonomous DevOps, Claude agents, devops evolution, human-in-the-loop, incident response automation, infrastructure as codeAre AI agents replacing DevOps engineers? Explore how tools like Claude are shifting DevOps from rigid automation to autonomous, adaptive systems, and why human judgment remains the critical link in managing system ...
North Korean Hackers Suspected in Supply Chain Attack on Popular Axios Project
Jeff Burt | | Axios, CI/CD, Google Threat Intelligence Group, JavaScript dependencies, Mandiant, North Korea, remote access trojan (RAT), Socket, sonatype, supply chain attack, TeamPCPThe threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large "blast radius." ...
Tool Fragmentation is Breaking Delivery Context — Here’s What Teams are Learning
Arul Watson | | access control, application security, automation, CI/CD pipelines, Cloud Security, credential exposure, Cybersecurity, devsecops, incident response, risk management, secrets management, security best practices, supply chain security, token managementExplore the emerging crisis in application delivery caused by tool fragmentation in modern software development. This article discusses the need for semantic interoperability, context preservation, and a shift from linear pipelines to ...
Making CI/CD Pipelines Truly Autonomous — Safe and Observability-Driven Workflows With TypeScript, Python and Contract-First API Testing
Sapan Tiwari | | API contract testing, autonomous CI/CD pipelines, CI/CD observability, contract-first API testing, devops automation, devops best practices, pipeline orchestration, Python DevOps automation, Self-Healing Pipelines, TypeScript contractsLearn how to design safe, observable, and autonomous CI/CD pipelines using contract-first API testing, TypeScript for contract safety, Python for orchestration, and observability-driven decision making ...
