GitLab Fixes Security Flaw That Lets Attackers Run Pipeline Jobs
If left unpatched, the vulnerability in the code repository could let threat actors run malicious code and access sensitive information.
Survey Shines Spotlight on Increasing Need for Industrial DevOps
A survey of 200 executives working for organizations that have revenues in excess of $350 million finds industrial coding errors cause manufacturing shutdowns lasting 31 hours on average, costing $4.2 million per hour for a total of $126 million per shutdown.
Boomi Centralizes Management and Governance of APIs
Boomi this week launched a control plane for application programming interfaces (APIs) to enable organizations to centrally manage and govern them regardless of how they are created or what platform they are running on.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted.
Survey Surfaces Lots of Software Supply Chain Insecurity
A global survey of 900 application security professionals finds nearly two-thirds work for organizations that have had their software supply chains compromised in the past two years.
Open-Source Software Community Riled by Yet Another CVE
Another maintainer of an open-source software project has decided to no longer actively update IP address parsing utilities used widely by JavaScript developers.
Aqua Security Shines Spotlight on Secrets Management Blindspots
A report published by Aqua Security finds that as many as 18% of secrets inadvertently exposed are not being discovered.
IBM Makes Generative AI Platform for DevOps Available
IBM has made generally available a framework, dubbed IBM Concert, that leverages generative artificial intelligence and knowledge graphs to surface in real-time dependencies.
Fauna Adds Declarative Tool to Update Namesake Database
Fauna has added an ability to maintain strict enforcement of schema to its document-relational database using a declarative language that makes it simpler to update databases within the context of a DevOps workflow.
Polyfill Becomes a Supply-Chain Risk to 100,000 Websites
A Chinese company in February bought the domain and GitHub account for Polyfill, a popular open-source library used by more than 100,000 websites to deliver JavaScript code.
Most Critical Open Source Projects Lack Memory-Safe Code, CISA Says
The country’s top cybersecurity agency is continuing to urge software developers to adopt memory-safe programming languages to help reduce the number of vulnerabilities in their products.
Orca Security Adds Ability to Scan Source Code for Vulnerabilities
Orca Security this week extended the reach of its cybersecurity portfolio to include an application that scans source code stored in GitHub and GitLab repositories for vulnerabilities.
Datadog Extends Scope and Reach of Observability Platform
Datadog at its DASH 2024 conference added a bevy of tools and capabilities to streamline DevSecOps workflows, including integration with open-source OpenTelemetry agent software developed under the auspices of the Cloud Native Computing Foundation (CNCF) and the Datadog On-Call tool to optimize incident management workflows in a way that maintains context with observability data already collected.
Sapient.ai Automation Platform Leverages AI to Create Unit Tests
Sapient.ai today launched a testing automation platform that makes use of artificial intelligence (AI) and automatically creates unit tests as the applications are developed.
Survey Surfaces Significant Adoption of AI Tools to Build Software
A global survey of 5,315 IT professionals that included 804 C-level executives and 1,439 security experts finds 39% of respondents reporting they work for organizations currently using artificial intelligence (AI) to build software.
JFrog Acquires Qwak to Meld MLOps and DevOps Workflows
JFrog today revealed it has acquired Qwak to add a machine learning operations (MLOps) platform to its existing portfolio of DevOps tools and platforms.
Broadcom Updates to VMware Portfolio Streamline DevOps Workflows
Broadcom today extended VMware Cloud Foundation (VCF) to provide templates that promise to make it simpler for DevOps teams to provide self-service catalogs to developers building applications on top of the private cloud based on an integrated compute, storage and networking platform.
Survey Surfaces Varying Levels of Enthusiasm for AI Coding Tools
A survey of 406 developers, software engineers, CTOs, CISOs and application security professionals finds that while the majority of respondents (80%) said their organization is ready to use artificial intelligence (AI) tools to write code, the level of enthusiasm for these tools is far higher among C-level executives. In fact, 40% of the 135 C-level […]
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
SmartBear Adds More Generative AI Testing Tools to Platform
SmartBear this week extended its efforts to bring generative artificial intelligence (AI) to its test automation portfolio to include test data and application programming interface (API) contracts.
Survey Surfaces Extent of Web Application Security Crisis
A survey of 349 U.S. and UK cybersecurity professionals finds that while 60% work for organizations that update web applications at least once a week nearly three-quarters (75%) test their web applications monthly or less often.
Digital.ai Extends Scope and Reach of DevSecOps Platform
The Erawan Release of a DevSecOps platform provides a set of new and enhanced capabilities to help automate applications security along with integration with Backstage, an open-source internal developer platform originally developed by Spotify that is now being advanced under the auspices of the Cloud Native Computing Foundation (CNCF).
Five Great DevOps Job Opportunities
Check out our weekly spotlight on current DevOps job postings, including positions at Deutsche Bank and Prudential Financial.