Sophisticated Supply Chain Attack Targeting Trivy Expands to Checkmarx, LiteLLM
The supply chain attack that compromised Aqua Security’s Trivy open source security vulnerability scanner and its associated GitHub Actions earlier this month continues to expand, with software development tools from Checkmarx and LiteLLM being the latest victims of the sophisticated campaign. The threat group behind it, TeamPCP, is using the attacks to create persistence and […]
Two Malicious npm Packages Aim to Steal Credentials and Other Secrets
Bad actors took over a npm maintainer account and have published two malicious packages designed to steal credentials, API keys, and other secrets from the computers of victims who download them from the repository. Analysts with Sonatype’s Security Research Team wrote in a report that the two packages – sbx-mask and touch-adv – likely are […]
The Future of AI in Software Quality: How Autonomous Platforms are Transforming DevOps
Agentic AI is transforming DevOps by embedding autonomous quality checks into CI/CD pipelines, improving code security, coverage and speed.
How OPA Changed Our Go-No-Go Forever
Learn how Open Policy Agent (OPA) transformed go/no-go releases from subjective meetings into automated, auditable, policy-driven decisions embedded directly in the CI/CD pipeline.
Test Automation Strategy for Growing Software Teams
Build a scalable test automation strategy that improves release speed, reduces defects, and supports growing software teams.
Secrets Management Failures in CI/CD Pipelines
Explore the critical role of secrets management in CI/CD pipelines and its impact on cybersecurity. This article highlights the risks of credential exposure, the importance of implementing strong security practices, and how organizations can ensure robust defenses against breaches and supply chain attacks.
Harness CEO Calls for Reimagining of CI/CD Workflows in the AI Era
Harness CEO Jyoti Bansal at an Unscripted 2025 event in New York today told attendees the time has come to reimagine how continuous integration/continuous delivery (CI/CD) platforms function in the age of artificial intelligence (AI). Rather than simply failing a build it’s now possible for the CI/CD platform to automatically fix issues that previously required […]
Survey Surfaces Multiple Mobile Application Release Management Headaches
A survey of 300 mobile engineers in the U.S and the United Kingdom (UK) working for organizations with 500 to 10,000 employees finds, on average, respondents are spending five hours per release on low-value tasks involving manual steps, coordination issues and approval bottlenecks, translating into 130 wasted engineering hours annually per developer. Published by Runway, […]
Why Continuous Integration Matters More Than Ever
Continuous Integration is now essential to modern DevOps, automating testing and deployment to deliver faster, higher-quality software with less risk and stronger team collaboration.
CI/CD Pipelines for Large Teams: How to Keep Velocity Without Breaking the Build
Continuous integration (CI) and continuous delivery (CD) are essential for modern software teams, as there is now a need for fast feature delivery and high-velocity improvements. However, achieving high speed may be difficult without compromising reliability, as the process involves coordinating among development teams working on different features of the same application simultaneously, product complexity […]
Why Your Deployments Fail: A Deep Dive Into Misconfigured Pipelines
Even for experienced DevOps engineers, pipelined deployments can fail in surprising ways when a detail is misconfigured.
Revolutionizing CI/CD: A Framework for Integrating Generative AI Across the Software Delivery Lifecycle
Integrating generative AI into your CI/CD practices is about adopting new tools and reimagining the entire software delivery lifecycle.
CloudBees Acquires Launchable to Advance Testing Using AI
CloudBees today revealed it has acquired Launchable, a provider of a test automation platform, to enable DevOps teams to improve both application security and software quality. Financial terms of the acquisition are not being disclosed.
GitLab Fixes Security Flaw That Lets Attackers Run Pipeline Jobs
If left unpatched, the vulnerability in the code repository could let threat actors run malicious code and access sensitive information.
Building Catchpoint Into CI/CD Pipelines
Catchpoint’s value proposition is simple to understand. It monitors website and application performance beyond your own infrastructure to provide a “user’s-eye view.”
Security, Automation and Developer Experience: The Top DevOps Trends of 2024
If you want to know what’s truly changing in the world of DevOps – as opposed to which conversations are most hype-worthy – these are the places to look.
Atlassian Taps AI to Automate Software Engineering Workflows
Atlassian acquired Optic, which uses OpenAPI to track API changes across a continuous integration pipeline. It also announced a new AI tool.
CDF Survey Surfaces DevOps Progress and Challenges
Most developers are using some form of DevOps practices, reports the CDF survey. Adopting STANDARD DevOps practices? Not so much.
DevSecOps: 5 Tips for Developing Better, Safer Apps
DevSecOps requires teams to collaborate and enable the organization to deliver safer applications to customers without compromising security.
Using LLMs to Automate Pipeline Conversions From Legacy to Tekton
There have been many technological advancements in the market today, but the main hindrance is the cumbersome process of switching from the existing technology/framework to the new one. This is where teams and organizations are left behind in the tech curve. In the DevOps landscape, CI/CD pipelines are the backbone of DevOps, and how you […]
Best of 2023: ‘Scrum == Cancer’ ¦ Plus: Linux 6.5 Ships
In this week’s #TheLongView: Scrum sucks, sources say; and here comes the Linux 6.5 kernel.
DevOps and Databases: The Key to Faster Deployment
Database observability is key to ensuring that CI/CD – especially continuous deployment – can keep pace with development workflows.
Microsoft kills Python 3.7 ¦ … and VBScript ¦ Exascaling ARM on Jupiter
In this week’s #TheLongView: VS Code drops support for Python 3.7, Windows drops VBScript, and Europe plans the fastest ARM supercomputer.