Features

AI coding, teams, vibecoding, shadow, vibecoding vibe, coding, GitHub, agents, Gemini, Canvas, Gemini, code, Augment Code, code, kernel compliance-as-code software secure software Terraform infrastructure

Anthropic Launches Claude Sonnet 4.5: Built for Production Coding and Extended Autonomous Work

Tom Smith | September 30, 2025 | AI agents, AI coding, AI teammates, autonomous operation, code refactoring, computer use, Cybersecurity, developer tools, devops, financial services, legal workflows, SWE-Bench, vulnerability remediation

Anthropic’s Claude Sonnet 4.5 sets a new bar for coding, agentic tasks, and computer use, with 30+ hours of autonomous operation. Early adopters report major gains in accuracy, security, and long-horizon development ...

PagerDuty, Harness, Qwiet, HashiCorp, Harness, Kong, API, sentry, Wiz, Veracode, ASPM,

Harness Acquires Qwiet AI to Gain Code Testing Tool

Mike Vizard | September 29, 2025

Harness has acquired Qwiet AI (formerly ShiftLeft) to integrate AI-driven application security directly into its DevOps platform. By combining Qwiet AI’s Code Property Graph technology with Harness’s AI agents and Traceable’s API ...

DORA 2025: Faster, But Are We Any Better?

Jenn Yarnold | September 29, 2025 | AI-assisted software development, amplification, culture & practices, developer productivity, DORA research, organizational systems, research report, strategic AI investment

The 2025 DORA Report — The State of AI-assisted Software Development by DORA / Google Cloud — introduces the DORA AI Capabilities Model, arguing that AI functions best as an amplifier of ...

job, opportunities, devops, career, jobs

Five Great DevOps Job Opportunities

Mike Vizard | September 29, 2025 | career advancement, career opportunities, DevOps jobs report, DevOps professionals, economic challenges, job market insights, salary ranges, talent shortage

DevOps.com continues to provide a weekly jobs report to highlight career opportunities for DevOps professionals and opportunities highlighted this week include roles at NMI, HiBob and FloQast ...

Latest DORA Report from Google Surfaces Significant AI Adoption

Mike Vizard | September 27, 2025 | ai, devops, DORA, it

Google this week published the results of its annual DevOps Research and Assessment (DORA) survey that finds 90% of the IT professionals surveyed are now using artificial intelligence (AI) tools, with 80% ...

microsoft, technical debt, LLMs Technical Debt applications

Microsoft’s AI Agents Target Technical Debt Crisis

Tom Smith | September 26, 2025 | .NET Framework to .NET Core migration, AI for code refactoring, AI-powered legacy system upgrades, application migration tools, cloud-native modernization, devops, enterprise cloud modernization, legacy Java modernization, technical debt modernization

Microsoft is tackling technical debt with new GitHub Copilot AI agents that modernize legacy Java and .NET apps, plus AI-powered updates to Azure Migrate and Azure Accelerate. These tools promise to cut ...

supply chain, software, Checkmarx, data, Endor, SCA, supply chain, security, workflows, supply chain, software, supply chain security, appsec, polyfill, software, supply chains, DevOps, DevSecOps, Google supply chain

How GitHub Plans to Secure npm After Recent Supply Chain Attacks

Tom Smith | September 26, 2025 | API token deprecation, CI/CD authentication, crates.io security, npm 2FA, npm registry attack, npm token theft, open source security, package registry malware, PyPI trusted publishing, Shai-Hulud worm, Software Supply Chain Security, trusted publishing

GitHub strengthens npm security after Shai-Hulud worm attack with mandatory 2FA, granular tokens, and trusted publishing to protect the open source supply chain ...

HashiCorp Embraces Agentic AI to Streamline Management of IT

Mike Vizard | September 25, 2025 | HashiCorp Cloud Platform HCP, Infrastructure as Code (IaC), IT infrastructure lifecycle management, Model Context Protocol MCP server, Project infragraph, secrets management, Vault Enterprise 1.21, zero trust automation

HashiCorp today added a slew of updates to its platform for managing and securing IT infrastructure, including integration with multiple automation frameworks and a preview of an ability to use artificial intelligence ...

Chainguard Adds Curated Repository to Secure JavaScript Libraries

Mike Vizard | September 25, 2025 | curated JavaScript libraries, DevSecOps practices, JavaScript dependency security, malware in open source, NPM security, open source software security, secure artifact management, secure software supply chain, Shai-Hulud, SLSA framework

Chainguard launched curated JavaScript libra ries built on the SLSA framework to secure software supply chains and protect against NPM malware risks ...