Two Malicious npm Packages Aim to Steal Credentials and Other Secrets
Bad actors took over a npm maintainer account and have published two malicious packages designed to steal credentials, API keys, and other secrets from the computers of victims who download them from the repository. Analysts with Sonatype’s Security Research Team wrote in a report that the two packages – sbx-mask and touch-adv – likely are […]
Open SWE Captures the Architecture That Stripe, Coinbase and Ramp Built Independently for Internal Coding Agents
Explore Open SWE, the open-source framework by LangChain that codifies the internal AI coding agent architectures used by Stripe, Ramp and Coinbase. Released March 17, 2026, this MIT-licensed project offers a customizable foundation using isolated sandboxes, subagent orchestration, and deep workflow integration for modern DevOps teams.
Policy as Code for Cost Control, Not Just Compliance
Policy as code can do more than enforce compliance. Learn how platform teams use guardrails, tagging and sizing policies to prevent cloud cost waste early.
When Code Becomes Cheap, Engineering Becomes Governance
AI agents can now generate in minutes what once took teams weeks, but the real shift is not faster coding. It is the collapse of code scarcity. As software production becomes industrialized, the job of engineers is moving from writing lines to governing systems, managing risk and deciding what should exist in the first place.
The Green Side of Observability: Why Less Data Can Mean More Insight
Observability can generate massive data volumes. Learn how sustainable observability reduces telemetry waste, lowers costs and improves insight.
Five Great DevOps Job Opportunities
Weekly DevOps jobs roundup, this week highlighting top roles in Massachusetts, New Jersey, Chicago, Charlotte and Seattle, with pay ranges and hiring trends to help DevOps pros advance careers.
The Risk Profile of AI-Driven Development
Analysis arguing that AI-driven code generation accelerates dependency decisions and expands supply-chain risk, requiring shift-left governance, prompt-level controls, automated SBOM/AIBOM visibility, threat-modeling as engineering, and autonomous security to match autonomous development.
How eBPF and OpenTelemetry Have Simplified the Observability Function
Overview arguing that OpenTelemetry eBPF Instrumentation (OBI) — combined with OpenTelemetry Injector — removes barriers to full observability by enabling zero-code, kernel-level telemetry for Kubernetes and Linux environments, solving language, legacy, and security challenges.
Sorry, Charlie, StarKist Wants AI With Good Taste
A surprising AI experiment showed that feeding a model sloppy code didn’t just produce bad programming, it produced bad behavior. The result points to something philosophers and DevOps engineers have long understood: Character, culture and incentives shape systems far more than rules alone.
Zero Downtime Multicloud Migrations for Observability Control Planes
Most platform teams aren’t deciding whether they’ll run across multiple clouds. They already are, or they’ll be soon. The real question is how to migrate critical systems without turning on-call into a guessing game. Observability raises the stakes more than almost any other domain. An observability control plane isn’t just a dashboard. It’s the operational […]
The Observability Bill is Coming Due – and AI Wrote Most of It
Observability has always had a data quality problem. AI coding agents just made it catastrophically worse. Shimmy sits down with the co-founders of Sawmills to dig into why unmanaged telemetry is the unglamorous DevOps crisis that is quietly killing budgets — and what an agentic telemetry management platform actually does about it.
Gemini Code Assist Gets Agent Auto-Approve, Inline Diffs, and Custom Commands to Speed Up the Core Coding Loop
Google’s latest Gemini Code Assist updates focus on workflow, not hype: Agent Mode with Auto Approve, inline diffs, a Context Drawer, custom commands, Finish Changes, and Outlines streamline how developers review, trust, and integrate AI-generated code in VS Code and IntelliJ.
Microsoft Azure Skills Plugin Gives AI Coding Agents a Playbook for Cloud Deployment
Microsoft’s new Azure Skills Plugin closes the gap between AI-written code and production deployments by packaging expert Azure knowledge as executable skills, backed by MCP servers for real infrastructure actions and AI workflows—bringing guardrails, consistency, and speed to DevOps and platform teams.
Anthropic Code Review Dispatches Agent Teams to Catch the Bugs That Skim Reads Miss
Anthropic Code Review dispatches agent teams to find bugs in PRs. Multi-agent analysis, severity ranking, and inline fixes for Teams and Enterprise.
VS Code Is Becoming an Agent Control Plane — and Most Teams Haven’t Noticed Yet
VS Code 1.110 ships agent plugins, hooks, and persistent memory. Microsoft is embedding control plane primitives into the IDE for AI agent governance.
GitHub Copilot Coding Agent for Jira Connects Planning to Pull Requests Without Leaving Your Workflow
GitHub Copilot, the coding agent, now integrates with Jira. Assign issues to Copilot and get draft PRs — no context switching between planning and code.
How We Got Here: Alert Fatigue to Decision Fatigue
AI and observability reduced alert fatigue, but decision fatigue remains. Decision architecture helps DevOps teams scale operational judgment.
On-Call Rotation Best Practices: Reducing Burnout and Improving Response
Practical SRE on‑call guide covering rotation models, alert hygiene, runbooks, metrics, compensation, shadowing, and automation to cut pager load and prevent engineer burnout.
Can QA Reignite its Purpose in the Agentic Code Generation Era?
AI-generated code is accelerating development but it exposes a deeper issue. Why deterministic infrastructure is becoming the foundation of agentic QA.
Unlocking Observability by Design With Inferred Schemas
Observability systems generate massive telemetry, but schema drift creates friction. Learn how inferred schemas and OpenTelemetry Weaver restore structure.
Context Engineering is the Key to Unlocking AI Agents in DevOps
Explore how context engineering is essential for transforming AI agents from experimental prototypes to reliable production tools in DevOps. Understand its impact on automation workflows, accuracy, and scalability.
Google ADK Opens the Door to AI Agents That Work Inside Your DevOps Toolchain
Google ADK adds integrations for GitHub, GitLab, Jira, MongoDB, and seven observability tools. AI agents can now work inside your DevOps toolchain.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]