Latest Articles
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
xAI Open-Sources Grok Build Coding Agent After Cloud Upload Exposes SSH Keys, Repos
Tom Smith | | AI agent governance, AI coding agent, Apache 2.0, credential exposure, developer privacy, devops security, github, Grok Build, open-source coding agent, Repository Security, source code security, xAIxAI has published the full source code for Grok Build, its terminal-based AI coding agent, on GitHub under an Apache 2.0 license. The release lands three days after a security researcher showed ...
HashiCorp Introduces tfpolicy, a Native Policy Framework for Terraform
Tom Smith | | Cloud Security, compliance automation, Hashicorp, HCL, HCP Terraform, infrastructure as code, Infrastructure Governance, OPA, Open Policy Agent, platform engineering, policy as code, Sentinel, Terraform, tfpolicyHashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks ...
AI-Generated Code Is Cheap But the Context Infrastructure Behind It Is Not
Saqib Jan | | AI coding, context engineering, Enterprise AI, RAG, retrieval-augmented generation, vector databasesThe cost curve for generating code with AI has moved in one direction, and it has moved fast. What used to require a senior engineer's full attention for an afternoon can now ...
Why You Need AI Agent Security Validation in Software Testing
Engineering teams have been racing for the last two years to deploy AI agents that can find bugs faster than any QA team ever could. Autonomous testing agents can crawl through codebases, ...
SmartBear Tightens Integration Between AI Coding and Testing Tools
SmartBear this week revealed it is narrowing the divide between coding and testing by integrating its platform with artificial intelligence (AI) coding tools. Sheryl Koenigsberg, senior vice president of product marketing at ...
Anaconda Doesn’t Want to Be Just the Python Company Anymore
The question is no longer whether Anaconda wants to be more than the Python company. It is how much of the AI development stack DeSanto ultimately intends to own ...
From AI Hype to AI Assurance: How Engineering Teams Can Safely Ship AI-Enabled Software
Olamilekan Lamidi | | AI assurance, AI Governance, AI testing, generative AI, MLOps, software engineeringAI has moved very quickly from experimentation to production. A few years ago, many organizations were still asking whether AI could improve their products or internal workflows. Today, the question is different: ...
Atlassian Extends AI Reach of Jira Into Agentic Engineering Workflows
Atlassian today extended the scope of tasks that artificial intelligence (AI) can automate directly from its Jira project management software, including assigning work to an AI coding agent. Initially, Jira integration with ...
GitHub API Abuse, ‘Ghost’ Accounts Part of Malicious Efforts to Map Organizations
Jeff Burt | | Cofense, Data Exfiltration, data mapping, data scraping, datadog, Fortran, GitHub API, GitHub ghost accounts, gitlab, GraphQL, personal tokens, REST APIsDatadog researchers uncover months-long overlapping campaigns to scrape data about companies and their developers ...
Why Developer Workstations Have Become a Critical Part of the Software Supply Chain
Samuel Ogbonna | | CI/CD security, Developer Security, Developer Workstations, devsecops, open source security, Software Supply ChainFor years, software supply-chain security discussions focused on centralized infrastructure such as build servers, package registries, and CI/CD systems. Recent attacks suggest that this view is incomplete. The Megalodon campaign injected malicious ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
