Please Grow Up, Coder Launches AI Maturity Self-Assessment Tool
Coder introduces an AI maturity self-assessment service to help organizations evaluate their AI adoption in software development. As teams transition from ad hoc usage to structured workflows, this tool addresses the need for governance and oversight in AI-driven projects.
Google Adds Hooks to Gemini CLI for Customized AI Workflows
Enhance Gemini CLI with new hooks to customize AI assistant workflows without code changes. Improve control and optimize AI for development teams.
Five Great DevOps Job Opportunities
Explore top DevOps job opportunities from companies like Technology Resource Experts, Thermo Fisher Scientific, Regeneron, Mutual of Omaha, and Macquarie Global Services. Advance your career with our weekly DevOps jobs report!
‘PackageGate’ Vulnerabilities Can Let Attackers Bypass Shai-Hulud Defenses
In the wake of the massive Shai-Hulud supply chain attack that ripped through npm late last year and compromised more than 700 packages and exposed 25,000 repositories, developers in the JavaScript world embraced a two-part defense strategy. The widely adopted playbook called for disabling lifecycle scripts and using lockfiles. “It became the standard advice everywhere […]
Opsera Report Highlights DevOps Challenges Created by AI Coding Tools
An analysis published today by Opsera, a provider of a DevOps platform, finds that while adoption of artificial intelligence (AI) coding tools has increased developer productivity they also create more duplicate code, resulting in 15 to 18% more security vulnerabilities per line of code compared to code created by a human developer. Overall, the Opsera […]
AWS CodeBuild Webhook Misconfiguration Exposed Admin Access Risk
AWS fixed webhook filter misconfigurations in CodeBuild that could have allowed unauthorized repository access. No customer impact or malicious code found.
Open-Source Coding Agents Just Got Accessible
Ai2’s open-source SERA coding agents slash the cost of training repository-aware AI, enabling teams to customize high-performance coding agents on private codebases for as little as $400.
Why Responsible AI Isn’t Optional in DevOps – It’s the Next Frontier of Ownership
As AI takes on decision-making roles inside CI/CD pipelines, DevOps teams face a new challenge: Accountability. This article explores why responsible AI governance is now a core DevOps responsibility and a leadership imperative.
Software Supply Chain Threats Are on the OWASP Top Ten—Yet Nothing Will Change Unless We Do
Software supply chain security is steadily moving to the forefront of cybersecurity conversations. In the past, it has been overshadowed by a focus on malware outbreaks, ransomware, endpoint protection, and application vulnerabilities. That changed this month, when OWASP elevated software supply chain failures to third place on its 2025 Top 10 list. The OWASP Top […]
Apiiro Guardian Agent Prevents AI Models From Generating Insecure Code
Apiiro launches Guardian Agent, an AI security agent that rewrites prompts in real time to prevent insecure code from ever being generated, reducing vulnerabilities without slowing developers.
Anthropic Adds Automated Security Reviews to Claude Code
Anthropic pulls security into the inner dev loop with new Claude Code tools that scan for vulnerabilities in the terminal and on every pull request—before insecure code ever ships.
The Four Knobs of AI Agent Reliability: A DevOps Perspective
AI agents aren’t chatbots—they’re systems that act. This guide cuts through the hype to show how DevOps teams can configure, trust, and run AI agents reliably in production.
Codenotary’s Free SBOM Service Tackles the AI Software Supply Chain
Just because AI is writing your code doesn’t mean you can stop worrying about software bills of materials. While the quality of AI coding remains open to debate, there’s no question that everyone and their dog is using it. That means, if you’re serious about using AI in production, you must track its code in […]
Five Great DevOps Job Opportunities
This week, DevOps.com spotlights open roles at NVIDIA, Travelers, Tessera Labs, Sherwin-Williams, and ThinKom Solutions to help engineers advance their careers.
Futurum Group Survey Sees Increasing Investments in AI to Deliver Software
A global survey of 628 enterprise IT leaders conducted by the Futurum Group finds that increasing investment in generative artificial intelligence (AI) (40%), followed closely by AI and machine learning (ML) technologies (39%) and applying AI to IT operations (37%), also known as AIOps, are expected to be the top three drivers for accelerating software […]
N. Korea Contagious Interview Campaign Turns to VS Code to Deliver Backdoor
Jamf security researchers said state-sponsored espionage actors are using malicious VS Code projects to steal information.
Legit Security AI Tool Uses Threat Feed to Identify Risks to Software Supply Chain
Legit Security this week added a threat feed that DevSecOps teams can use to instantly determine if a newly discovered vulnerability impacts their software supply chain. Built using the Legit VibeGuard tool, the threat feed added to the company’s application security posture management (ASPM) platform also enables DevSecOps teams to take advantage of “vibecoding” techniques […]
DevOps: The Never-Ending Story
A reflective take from Alan on why DevOps endures, adapts, and remains a human-centered practice in an era of platforms and AI.
Stop Worshipping ‘Global Availability’: A Practical SLI/SLO Bucketing Playbook
Global availability hides real failures. Learn why bucketed SLIs give a truer picture of reliability—and how SRE teams can align alerts with real business impact.
AWS Sage: Your AI Assistant’s Gateway to the Cloud
AWS Sage is an open-source MCP server that gives AI assistants unified, intelligent access to AWS with cross-service discovery, dependency mapping, impact analysis, and automated incident investigation.
Autoptic Unfurls AI Change Resilience Agents to Analyze Telemetry Data
Autoptic launches AI-powered change resilience agents that analyze DevOps telemetry to detect root causes, prevent incidents, and boost confidence before production changes.
Testlio Adds AI Tool to Generate Dashboards on App Testing Service
Testlio enhances its testing platform with AI-generated dashboards that correlate over 100 signals, helping DevOps and business leaders spot quality, risk, and AI-related issues faster.
Harness Adds AI Agent to Help Investigate Incidents
Harness today added an artificial intelligence (AI) agent to its portfolio that has been specifically trained to help DevOps teams investigate events that occurred prior to an incident. Tina Huang, vice president of product and engineering for AI SRE at Harness, said the Harness Human-Aware Change Agent leverages large language models (LLMs) to analyze comments […]