News
Chainguard Adds Curated Repository to Secure JavaScript Libraries
Mike Vizard | | curated JavaScript libraries, DevSecOps practices, JavaScript dependency security, malware in open source, NPM security, open source software security, secure artifact management, secure software supply chain, Shai-Hulud, SLSA frameworkChainguard launched curated JavaScript libra ries built on the SLSA framework to secure software supply chains and protect against NPM malware risks ...
Harness Extends Scope and Reach of AI Platform for Automating DevOps Workflows
Mike Vizard | | AI for DevOps, AI in software delivery, AI observability integration, AI rollback, Architect Mode DevOps, autonomous code maintenance, devops automation, internal developer portal AI, release orchestration AIHarness today previewed two additional modules for its artificial intelligence (AI) platform for DevOps that automate code maintenance and automatically rollback a deployment whenever an issue is detected. Additionally, Harness is adding ...
CodeRabbit Adds CLI Support to Code Review Platform Based on AI
Mike Vizard | | AI code review, AI coding tools, AI in DevOps, AI trust layer, CLI support, code dependencies, code graph analysis, custom pre-merge checks, developer productivity, DevOps workflows, Git repositories, MCP client, Model Context Protocol, open source code review, secure code review, software quality, unit test generationCodeRabbit expands its AI-powered code review platform with CLI support, auto unit test generation, custom pre-merge checks, and an MCP client. Backed by $60M in new funding, CodeRabbit helps developers catch routine ...
WhiteCobra Targets Developers with Dozens of Malicious Extensions
Jeff Burt | | cryptocurrency, LummaStealer, malicious extensions, malware, Open VSX, VSCode, WhiteCobraA threat group is dropping two dozen malicious extensions into the VSCode and Open VSX marketplaces, targeting developers using the VSCode, Cursor, and Windsurf source code editing tools with the goal of ...
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
OpenTelemetry Extensions to Enable Observability of AI Agents
Mike Vizard | | AI agents, AI observability, AI-driven IT automation, DevOps observability, LLM telemetry, observability, OpenTelemetry, OpenTelemetry semantic extensions, telemetry collection, Telemetry data, time-series data analysisOpenTelemetry is extending support for AI agents, enabling unified observability across apps and intelligent automation of IT tasks. Discover how Cisco and Splunk are driving this next phase of telemetry innovation ...
Hush Security Emerges to Eliminate Need for Application Secrets
Mike Vizard | | AI agent security, API key protection, application secrets management, cloud-native security, CNCF SPIFFE, credential theft prevention, credential-free security, DevSecOps secrets management, just-in-time access controls, microservices secrets, runtime identity controls, secrets discovery, secrets sprawl, SPIFFE runtime access, zero trust secretsHush Security today emerged from stealth to provide an alternative approach to protecting application secrets using a platform that is designed to continuously discover them and then apply access controls based on ...
DevGovOps, A New Play on DevOps, or is It?
Jenn Yarnold | | AI Governance, AI supply chain security, artifact trust, compliance in CI/CD, DevGovOps, devops evolution, DevOps governance, DevSecOps vs DevGovOps, enterprise AI compliance, governance automation, governance in DevOps, JFrogswampUp2025, platform governance, responsible AI adoption, shadow AI management, software supply chain complianceDevGovOps is emerging as the next evolution of DevOps, embedding governance into software delivery pipelines. At JFrog’s SwampUP 2025, governance, AI supply chains, and compliance took center stage—positioning DevGovOps as essential for ...
JFrog CEO: AI Agents Require Practices Beyond Security, Traceability
NAPA, Calif. -- A new persona in software development, artificial intelligence (AI) agents rather than human developers, has made it imperative that foundational platforms incorporate agentic practices alongside security, traceability, and visibility ...
Survey: Most IT Teams Not Prepared to Manage AI Workloads
Mike Vizard | | AI deployment challenges, AI Governance, AI operations challenges, AI workload observability, AI workload scaling, cloud cost management, IaC tools, infrastructure as code, infrastructure scalability, IT automation readiness, IT infrastructure automation, IT infrastructure modernization, IT skill gaps, platform engineering, Terraform automationA ControlMonkey survey of 300 IT leaders finds most organizations are unprepared to scale AI workloads, citing automation gaps, reliability, skills shortages, and cost challenges. Modernizing infrastructure management with IaC is critical ...
Empromptu Unveils Vibecoding Platform for Building Enterprise-Class Apps
Mike Vizard | | AI app scalability, AI application development, AI coding platform, AI coding tools, AI developer workflows, AI DevOps, AI output controls, AI response optimization, AI vs low-code platforms, enterprise AI applications, enterprise software development, explainable AI, LLMOps, RAG, retrieval-augmented generation, SOC-2 compliant AI, vibecodingEmpromptu has launched its AI coding platform for building enterprise-class applications, featuring RAG, LLMOps, explainability, and SOC-2 compliance. Designed for scalability, accuracy, and predictable pricing, it aims to outperform vibecoding tools and ...
Perforce Adds Small Language Model to Create Synthetic Data for App Testing
Mike Vizard | | AI in DevOps, air-gapped IT environments, compliance testing AI, data masking automation, DevOps AI, secure application testing, small language model (SLM), synthetic data testingPerforce has added AI to its Delphix platform, enabling DevOps teams to use small language models (SLMs) for secure synthetic data testing—even in air-gapped, regulated environments. The update automates data masking, supports ...
