Revolutionizing CI/CD: A Framework for Integrating Generative AI Across the Software Delivery Lifecycle
Integrating generative AI into your CI/CD practices is about adopting new tools and reimagining the entire software delivery lifecycle.
DataOps and Automation: The Future of Database Management
Database bottlenecks undermine deployment velocity across businesses. Complex operational tasks introduce delays and outages that directly impact time-to-market. While DevOps has transformed application delivery, database management remains manual and error-prone, reinforcing the friction DevOps aims to eliminate. An alternative is to extend the proven DevOps practices into database operations through a DataOps approach. By treating […]
AI-Driven Drift Detection in AWS: Terraform Meets Intelligence
Configuration drift, the divergence of deployed infrastructure from its source-defined configuration, has emerged as a critical vulnerability, particularly within the complex AWS environments I’ve managed, orchestrated by infrastructure as code (IaC) tools like Terraform.
AWS Extends Cloud Security Reach to Include DevSecOps Tools to Scan Code
Amazon Web Services (AWS) this week made Amazon Inspector, a code scanning tool for surfacing vulnerabilities that is designed to be natively integrated with GitHub and GitLab platforms, generally available. Announced at the AWS re:Inforce 2025 conference, Amazon Inspector combines a static application security testing (SAST) tool for analyzing application source-code with a software composition […]
New Relic Adds Support for Model Context Protocol to Observability Platform
New Relic this week added support for the Model Context Protocol (MCP) to its observability platform to surface insights into artificial intelligence (AI) agents and applications. Originally developed by Anthropic, MCP is rapidly becoming a de facto application programming interface (API) for enabling interoperability between AI agents and other sources of data. New Relic has […]
Ciroos.AI Preps AI SRE Agents Trained to Automate Incident Management
Ciroos.AI this week emerged from stealth to provide early access to a set of artificial intelligence (AI) agents that have been trained to augment site reliability engineers (SREs). Fresh off raising $21 million in additional funding, Ciroos.AI CEO Ronak Desai said the SRE Teammate provides access to multiple extensible AI agents that have been trained […]
Survey Surfaces Uneven Adoption of SBOMs to Secure Software
A survey of 100 security professionals finds nearly half (48%) of security professionals admit their organizations are falling behind on meeting software bill material (SBOM) requirements as specified by the U.S. Office of Management and Budget (OMB) Memo M-22-18, Executive Order 14028, and the European Union (EU) Cyber Resilience Act. Conducted during the recent RSAC […]
Hybrid Infrastructure Is a Mess—But It Doesn’t Have to Be
If you’re a CIO who is managing hybrid infrastructure, you’re like the peace-keeper in a dysfunctional family. On one side, you’ve got the old-school on-prem team—practical, cost-conscious, maybe a little stubborn. On the other hand, the cloud team is fast-moving, quickly adopting the latest tools, and sometimes a little dismissive of “legacy” infrastructure. And just […]
ArmorCode Makes Anya AI Agent Generally Available
ArmorCode at the 2025 RSA Conference this week made generally available Anya, an artificial intelligence (AI) agent added to its application security posture management (ASPM) platform that has specifically been trained to augment DevSecOps teams.
Legit Security Extends AI Reach of ASPM Platform
Legit Security at the 2025 RSA Conference today extended the reach of its application security posture management (ASPM) platform that leverages artificial intelligence (AI) to identify vulnerabilities and other weaknesses to now include suggestions for remediating issues in code.
Break the Bottleneck of API Sprawl With AI-Powered Automation
The race to accelerate digital transformation across business units within an organization has led to a rapid surge in APIs, though unfortunately, without a central strategy in place.
The DevOps Bottleneck: Why IaC Orchestration is the Missing Piece
If you work in DevOps, you’ve heard it a thousand times: “Do more with less.” More automation, more security, more reliability—but with the same (or fewer) people. Meanwhile, your development teams keep growing, pushing out new features at breakneck speed. Yet somehow, the infrastructure team is supposed to scale magically to keep up. Let’s be […]
North Korean Bad Actor’s Fake Job Offer Scam Targets Developers
Freelance developers around the world are being targeted by North Korean bad actors posing as job recruiters who as part of the fake application process entice them to run software jobs that actually compromise their systems with infostealer malware.
Typosquat Supply Chain Attack Targets Go Developers
A backdoor that impersonates a widely used database module in the popular Go programming language can give hackers control of infected systems, according to a senior threat intelligence analyst with developer-focused platform provider Socket. The malicious package, which the threat actor first published in November 2021 and remains in the Go Module Proxy, typosquats the […]
How AI-Based Insights Can Transform Observability
How AI-powered insights can help transform observability and enable organizations to better comprehend and manage their applications.
Fake Stars in GitHub a Growing Security Threat, Analysis Finds
There was a surge of inauthentic stars on code repositories in 2024, ramping up the threat of software supply chain attacks.
Best of 2024: Jenkins and JenkinsX in 2024
This article is a response to “The Future of Jenkins in 2024” article, published late last year. If you’re a software developer, it is practically impossible that you haven’t at least heard of Jenkins. Developed initially by Sun Microsystems as Hudson, Jenkins is written in Java and has been the leader in software life cycle […]
Best of 2024: DevOps: What’s the End Goal?
Don MacVittie asks the existential question: What, exactly, are we trying to achieve through DevOps’ integration with AI?
Best of 2024: What is RISC-V and Why Has it Become Important for Java?
Arm-based processors, which are increasingly popular, may capture a significant share of the semiconductor market with RISC-V.
Best of 2024: Configuration-as-Code: Trends and Predictions for 2024
CaC allows for a version-controlled, reproducible and automated method of managing environments, leading to more consistent and reliable systems.
Best of 2024: Policy-as-Code Will Rule Your CD Pipelines
If you are using tools with PaC, start building some policies, and if not, consider experimenting with those tools.
Best of 2024: Internal Developer Platform (IDP) Reference Architectures
IDPs have been the talk of the town. But what does an IDP actually look like? Bill Doerrfeld explains.
Best of 2024: Three DevOps Trends to Watch in 2024
As the year rolls on, here are a few key DevOps trends to watch for in 2024