Latest OpenTofu Release Simplifies Configuration Updates
The latest update to the OpenTofu infrastructure-as-code (IaC) tool is making it simpler to update and refactor configurations without having to rework the entire codebase. Version 1.12.0 of OpenTofu has added a destroy = false lifecycle option that enables DevOps engineers to drop an object from state without issuing a destroy application programming interface (API) […]
GitHub Copilot Gets Its Own App — and Agents Are the Reason Why
GitHub debuts the Copilot app at Microsoft Build 2026 — an agent-native desktop experience for managing parallel AI agents, canvases, sandboxes, and code review.
Survey Surfaces Pervasive Adoption of AI Across SDLC
Tricentis survey reveals 68% of orgs use AI in software delivery, but 60% admit to shipping untested code, leading to massive financial and security risks.
Microsoft Brings AI Agents Directly Into the Windows Terminal
Microsoft’s Intelligent Terminal 0.1 brings native AI agent integration to the Windows Terminal. Here’s what DevOps engineers need to know.
Shai-Hulud Clone ‘Miasma’ Compromises 32 Red Hat npm Packages
The threat group behind the notorious Mini Shai-Hulud worm last month put the complete source code for the malware into a GitHub repository, essentially open sourcing the threat so that other bad actors can create their own variants. GitHub reportedly took down the repository shortly after it appeared, but the damage was already done, with […]
Postman Adds AI Agent to Automate API Development and Governance
Postman added an artificial intelligence (AI) agent to its portfolio of tools and platforms for building and governing application programming interfaces (APIs) that can autonomously perform tasks ranging from development and documentation to exploration and setting up integrations with continuous integration/continuous deployment (CI/CD) environments. Company CEO Abhinav Asthana said the AI Engineer significantly reduces the […]
Can Chainguard Save Open-Source Software From Mythos? Can Anyone?
IBM and Red Hat aren’t the only ones that mean to lock down open-source code against AI hacking tools. Last week, IBM and Red Hat launched Project Lightwell to protect open-source projects with $5 billion and 20 thousand engineers. Not to be outdone, with tongue in cheek, Chainguard’s CEO Dan Lorenc announced a $50 million, […]
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
xAI Opens Grok Build 0.1 to Developers via API
xAI’s Grok Build 0.1 is now available in public beta via the xAI API — a fast, purpose-built coding model for agentic workflows, debugging, and MCP support.
Claude Code’s Dynamic Workflows Take on the Tasks That Were Too Big to Automate
Anthropic’s Claude Code dynamic workflows run parallel subagents to tackle codebase-wide audits, large migrations, and complex engineering tasks end-to-end.
Claude Code Security Catches Vulnerabilities While You Write Code
Claude Code Security uses AI reasoning to catch complex vulnerabilities in code — including logic flaws that traditional static analysis tools consistently miss.
Microsoft Brings MCP to Geospatial Workflows With Planetary Computer Pro Tools for VS Code
Microsoft’s Planetary Computer Pro MCP Tools for VS Code bring 35+ geospatial tools into GitHub Copilot via natural-language prompts.
Harness Adds Pair of Tools to Track ROI in AI Coding
Harness today added two tools to track and analyze the impact code generated by artificial intelligence (AI) coding tools is having on application development. An AI Development Lifecycle (DLC) tool installs agent software on a developer’s machine to track adoption, sessions, and the code created across every coding agent, while a Cloud & AI Cost […]
IBM, Red Hat Launch Project Lightwell to Secure Open Source Software from Frontier Models
IBM and Red Hat are bringing together what they’ve learned from frontier AI models and 20,000 engineers to launch Project Lightwell, a $5 billion initiative aimed at helping enterprises better secure their open source software, work that has become more challenging in the age of such models as Anthropic’s Claude Mythos Preview. Mythos and similarly […]
JFrog Report Surfaces Need for Rapid DevSecOps Change in AI Era
A report published by JFrog finds that cybercriminals are now increasingly targeting the artificial intelligence (AI) tools and platforms used by application development teams. Based on an analysis of 18.2 billion artifacts managed via the JFrog Platform, security researchers discovered 969 AI agent skills carrying high-impact payloads in addition to 495 malicious AI models on […]
Sol Duara Readies Open Source Workflow Orchestration Platform for CD Foundation
Sol Duara, a provider of open source platforms for managing the software development lifecycle (SDLC), has announced its intent to contribute an open source orchestration platform for automating software development workflows to the Continuous Delivery (CD) Foundation. At the core of the Conduit platform from Sol Duara is CDrus Expressions, a framework that turns CDEvents […]
Perplexity Bumblebee Shakes Loose Hidden Threats on Dev Desktops
The fight to maintain security has moved to the engineer’s messy desktop. Last week, AI search provider Perplexity open-sourced an internal tool, Bumblebee, for checking developer machines, either Linux or macOS, for vulnerable software. Continuous integration pipelines have baked security checks into them, with Software Bills of Materials (SBOMs) ensuring that the correct version of […]
OWASP Adopts CVE Lite CLI to Boost Dependency Scanning
Checking for dependency vulnerabilities in freshly developed software is usually done near the end of the build process. Remediation at that point can be tricky. Now, JavaScript and TypeScript developers can check for vulnerabilities themselves as they – or their agents – write their source code, using an open source project called CVE Lite CLI. […]
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Attackers Can Exploit a Claude Code RCE Flaw to Take Command of System
A dangerous vulnerability found in Anthropic’s popular Claude Code developer model could have allowed bad actors to grab control of a victim’s system by luring them into clicking on a crafted malicious deeplink. Once in, the attacker could exploit the remote code execution (RCE) security flaw to execute arbitrary commands – such as shell commands […]
OpenTelemetry Achieves CNCF Graduated Project Status
The Cloud Native Computing Foundation (CNCF) today announced that the open source OpenTelemetry (OTel) project has officially graduated a little more than seven years after its initial adoption. Announced at the Observability North America Summit, OpenTelemetry was first donated to the CNCF in 2019 following the merger of separate OpenTracing and OpenCensus projects that sought […]
Microsoft Open-Sources RAMPART and Clarity to Bring Agent Safety Into the Dev Workflow
Microsoft open-sources RAMPART and Clarity to help dev teams embed AI agent safety testing directly into CI pipelines and design workflows.
CloudBees Survey Surfaces Increase in Production Issues Attributable to AI
A survey of 213 IT leaders, conducted by CloudBees, finds that while 93% report they are seeing productivity gains that are driven by increased adoption of artificial intelligence (AI) tools, a full 81% also report they have seen an increase in production issues attributable to AI-generated code. Shared this week at an Agentic DevOps World […]