Features
Sol Duara Readies Open Source Workflow Orchestration Platform for CD Foundation
Sol Duara, a provider of open source platforms for managing the software development lifecycle (SDLC), has announced its intent to contribute an open source orchestration platform for automating software development workflows to ...
Perplexity Bumblebee Shakes Loose Hidden Threats on Dev Desktops
The fight to maintain security has moved to the engineer’s messy desktop. Last week, AI search provider Perplexity open-sourced an internal tool, Bumblebee, for checking developer machines, either Linux or macOS, for ...
OWASP Adopts CVE Lite CLI to Boost Dependency Scanning
Checking for dependency vulnerabilities in freshly developed software is usually done near the end of the build process. Remediation at that point can be tricky. Now, JavaScript and TypeScript developers can check ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
Attackers Can Exploit a Claude Code RCE Flaw to Take Command of System
Jeff Burt | | agentic AI, AI (Artificial Intelligence), AI security risks, Anthropic Claude Code, automated parsers, deeplinkA dangerous vulnerability found in Anthropic’s popular Claude Code developer model could have allowed bad actors to grab control of a victim’s system by luring them into clicking on a crafted malicious ...
OpenTelemetry Achieves CNCF Graduated Project Status
The Cloud Native Computing Foundation (CNCF) today announced that the open source OpenTelemetry (OTel) project has officially graduated a little more than seven years after its initial adoption. Announced at the Observability ...
Microsoft Open-Sources RAMPART and Clarity to Bring Agent Safety Into the Dev Workflow
Microsoft open-sources RAMPART and Clarity to help dev teams embed AI agent safety testing directly into CI pipelines and design workflows ...
CloudBees Survey Surfaces Increase in Production Issues Attributable to AI
A survey of 213 IT leaders, conducted by CloudBees, finds that while 93% report they are seeing productivity gains that are driven by increased adoption of artificial intelligence (AI) tools, a full ...
GitHub Breach Tied to Malicious VS Code Extension Exposes Thousands of Internal Repositories
GitHub says attackers accessed thousands of internal repositories after a company employee’s device was compromised through a malicious Visual Studio Code extension, though the company said it has removed the malicious extension, ...
The Automation Layer Wants to Own Enterprise AI
Alan Shimel | | AI agents, Automation Layer, Enterprise AI, Infrastructure Governance, Operational Trust, platform engineering, Probabilistic Systems, runtime securityOrganizations want AI systems capable of prioritizing alerts, routing workflows, coordinating across applications, initiating remediation steps, summarizing operational data and adapting dynamically based on changing context. The system is no longer following ...
OpenSSF’s CRob: ‘The Runway Is Rapidly Running Out’ on EU CRA Readiness
The EU's Cyber Resilience Act kicks into high gear this September, and companies are still clueless about how they must obey its strictures. MINNEAPOLIS — At Open Source Summit North America, Christopher ...
1Password Allies With OpenAI to Secure Codex AI Coding Tool
Mike Vizard | | AI coding tools, credential security, devsecops, just-in-time credentials, MCP Server, Model Context Protocol, secrets management, Software Supply ChainDevSecOps teams can now manage coding agents as a tenant rather than another vault where secrets might be stored, ensuring credentials are never exposed to an AI agent or LLM as plain ...
