Latest Articles
Infrastructure as Code, Security Blind Spots, and the Messy Reality of DevOps
I’ve spent most of my career in infrastructure and reliability engineering, from years as an SRE at Google to leading teams at Facebook and now building Spacelift. Along the way, I’ve watched ...
Survey Sees Developers Embracing AI Faster than Project Leaders
A survey of 1,129 developers and 50 project managers suggests that individual developers are significantly further ahead when it comes to embracing AI than managers of application development projects. Conducted by BairesDev, ...
ChatGPT Developer Mode: Full MCP Access with Serious Responsibilities
OpenAI recently released Developer Mode for ChatGPT, and it's not for everyone. This beta feature provides full Model Context Protocol (MCP) client support, granting complete access to both read and write operations ...
Massive VS Code Secrets Leak Puts Focus on Extensions, AI: Wiz
Researchers with cybersecurity firm Wiz earlier this year discovered, almost by chance, a significant supply chain risk and massive secrets leak in the Visual Studio Code and OpenVSX marketplaces that they said ...
Survey Surfaces Widespread Adoption of AI to Improve DevSecOps
A global survey of 1,015 IT professionals with responsibility for application security finds more than three quarters (77%) are using artificial intelligence (AI), with another 13% considering adoption. Conducted by Fastly, a ...
Establishing Visibility and Governance for Your Software Supply Chain
Parth Patel | | application security, asset visibility, attack surface management, build-time security, Cloud Governance, context-aware security, cybersecurity governance, dependency tracking, eBPF runtime analysis, Kubernetes Gatekeeper, Log4Shell, open source security, provenance attestation, risk reduction, SBoM, SBOM automation, secure software development, SLSA, software bill of materials, software provenance, Software Supply Chain Security, supply chain risk, Third-party Dependencies, VEX, vulnerability management, vulnerability prioritizationAsset visibility and cloud governance start with SBOMs, VEX, and provenance tracking. Learn how to secure your software supply chain ...
Secure By Design, Secure by Default
Julian Browne | | adaptive security, continuous improvement, continuous security, cyber resilience, devops, devops best practices, devsecops, dynamic systems, embedded security, enterprise compliance, incident response, modern software delivery, production monitoring, real-time security, secure by default, secure coding, secure-by-design, security governance, security in production, security strategy, security theatre, shift left security, software security, static analysis, threat modeling“Shift left” alone won’t secure software. Real security must be embedded continuously across design, development, and production—not just moved earlier ...
When Metrics Overwhelm: How SREs Help Engineers Reclaim Focus
Neel Shah | | alert fatigue, contextual logging, developer experience, developer productivity, devops, DevOps transformation, Distributed Tracing, engineering efficiency, incident response, metrics and logs, observability, observability tooling, root cause analysis, site reliability engineering, software reliability, SRE, system resilience, war room cultureObservability promised insight but delivered alert fatigue. Learn how SREs are redefining observability to empower developers and restore real engineering value ...
Git Services Need Better Security. Here’s How End-to-End Encryption Could Help
Tom Smith | | code security, devops security, end-to-end encryption, GitLab security, repository protection, secure development practices, Software Supply Chain SecurityA new study from the University of Sydney, UESTC, and Google introduces efficient end-to-end encryption for Git services like GitHub and GitLab. Learn how this breakthrough could secure your code repositories without ...
Five Great DevOps Job Opportunities
Mike Vizard | | BCC Software, DevOps careers, devops engineer, DevOps hiring trends, DevOps job market, devops jobs, DevOps salaries, DevOps.com jobs report, John Deere careers, NetApp jobs, Red Hat jobs, remote DevOps jobs, senior devops engineer, software engineer DevOps, VSCO jobsExplore the latest DevOps job openings from leading companies including VSCO, John Deere, Red Hat, BCC Software, and NetApp. DevOps.com’s weekly jobs report highlights high-paying roles and insights into the current DevOps ...
How to Eliminate DevOps Toil Using Automation Scripts
Durojaye Olusegun | | 15-minute rule, ansible, automation best practices, automation documentation, automation framework, automation ROI, automation scripts, automation testing, automation validation, CI/CD optimization, developer productivity, DevOps efficiency, DevOps maintenance, DevOps time savings, devops toil, DevOps workflows, eliminate toil, engineering automation, engineering productivity, fail-safe scripts, idempotent scripts, infrastructure automation, manual task reduction, observability in scripts, orchestration vs scripting, reduce manual DevOps work, repetitive task automation, script automation, TerraformEngineering teams spend nearly 15 hours a week on repetitive DevOps toils that drain productivity. This guide explains how to identify high-impact automation opportunities, apply the 15-minute rule, and build sustainable script-based ...
Grafana Labs Extends AI Capabilities of Observability Platform
Mike Vizard | | Adaptive Profiles, Adaptive Traces, AI for IT operations, AI in DevOps, AI incident management, AI observability, AI-driven observability, AIOps, Bring Your Own Cloud, BYOC, democratizing observability, DoD IL5, Grafana Cloud Knowledge Graph, Grafana ObservabilityCON 2025, incident remediation AI, IT root cause analysis, OpenTelemetry, RCA Workbench, root cause analysis, telemetry data analysisGrafana Labs this week made generally available an artificial intelligence (AI) agent, dubbed Grafana Assistant, for its namesake dashboard in addition to previewing Grafana Assistant Investigations, an AI incident management tool that ...
