Legit Security Adds Dashboard to ASPM Platform to Improve DevSecOps
Legit Security this week added a dashboard to its application security posture management (ASPM) platform that makes it simpler to correlate the creation of a vulnerability to a specific application development team.
Microsoft’s Hyperlight Wasm: Bringing WebAssembly to Secure Micro-VMs
Microsoft expands its Hyperlight project with Hyperlight Wasm, enabling secure WebAssembly workloads in lightweight VMs across Windows, Linux, and macOS platforms.
Pulumi Extends Security Reach to Include Managing Secrets and Policy-as-Code
Pulumi today extended the reach of its Environments, Secrets and Configurations (ESC) platform for managing infrastructure-as-code (IaC) into the realm of DevSecOps by adding the ability to manage secrets and implement policies.
Imandra Extends Symbolic AI Model to Validate Source Code
Imandra today launched an artificial intelligence (AI) agent, dubbed CodeLogician, that uses symbolic models to transform source code into mathematical models that can then be validated and tested in a way that is more accurate than relying on a large language model (LLM).
ControlMonkey Adds Disaster Recovery Capability to IaC Platform
ControlMonkey today added a disaster recovery module to its namesake software-as-a-service (SaaS) platform for automating the management of infrastructure-as-code tools based on open-source Terraform software. Company CEO Aharon Twizer said that Automate Disaster Recovery makes it possible to reduce by 90% the amount of time required to restore cloud configurations, networking, security policies and other […]
Google’s OSV-Scanner V2: Leveling Up Vulnerability Management for Developers
Google’s OSV-Scanner V2.0.0 brings enhanced vulnerability scanning with container support, interactive visualizations, and innovative remediation features.
GitLab 17.10: Enhancing Developer Experience with AI-Powered Code Review and Root Cause Analysis
GitLab 17.10 introduces Duo Code Review and Root Cause Analysis for self-hosted environments, along with enhanced metrics visualization and markdown improvements.
Perforce Acquires Snowtrack to Improve Collaboration Across Application Development Teams
Perforce Software this week acquired Snowtrack, a provider of version control software used by application designers, to foster greater collaboration with software engineering teams.
Survey Surfaces IT Infrastructure Automation Shortfalls
A survey of 413 infrastructure decision-makers and influencers published today finds nearly half (45%) believe their organization has achieved a high level of infrastructure automation.
Sideko Launches Platform to Automate API Ecosystem Management
Sideko’s new platform automates API documentation and tools maintenance, helping enterprises like Prudential scale API programs while preparing for AI integration.
Streamlining App Development with Gemini’s New Canvas Feature
Gemini’s new Canvas feature transforms app development workflows with real-time collaboration, code preview capabilities and seamless prototyping for developers of all skill levels.
Oracle Unveils Java 24 with Focus on AI Integration, Post-Quantum Cryptography and Developer Experience
Oracle releases Java 24 with new AI capabilities, post-quantum cryptography and simplified programming features while celebrating 30 years of Java innovation.
Futurum Research Report Surfaces Increasing DevOps Adoption of AI
A survey of 855 IT decision-makers conducted by The Futurum Group finds artificial intelligence (AI) is increasingly being viewed as playing a critical role in the development and deployment of software.
GitHub Action Compromise Risks Data Leaks for 23,000 Repositories
The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories.
Five Great DevOps Job Opportunities
The five DevOps job postings shared this week include opportunities at Spotify, Ace Hardware Corp., and Boeing Intelligence and Analytics.
Semaphore Goes Open Source: A New Dawn for DevOps Professionals
Semaphore’s CI/CD platform goes open source under Apache 2.0, offering DevOps professionals a scalable solution without vendor lock-in. Explore how this changes the game.
Consortium Driving OpenStack to Become Arm of The Linux Foundation
The Open Infrastructure Foundation (OpenInfra), which oversees the development of the open source OpenStack cloud computing framework, this week agreed to become an arm of The Linux Foundation as part of an effort to foster more collaboration with maintainers of projects such as Kubernetes and the Linux operating system.
Cycloid Adds Ability to Customize Components of a Software Stack to DevOps Platform
Cycloid today extended its platform for managing and governing software engineering workflows to provide DevOps teams with more granular control over how stacks of software components are constructed and managed.
Eclipse Foundation to Release Open Source IDE Infused with AI Agents
The Eclipse Foundation today made available an alpha release of an instance of its open source Theia integrated development environment (IDE), that provides access to artificial intelligence (AI) agents that will automate a wide range of coding tasks on behalf of application developers.
Sonar Combines SAST and SCA Tools in Single Offer
Sonar today revealed it will at the end of May add an offering that combines its Static Application Security Testing (SAST) tool with the software composition analysis (SCA) tools it gained with the acquisition of Tidelift late last year.
Analysis of GitHub Repositories Surfaces Nearly 23M Secrets
An analysis of public GitHub repositories published today finds 22.8 million hardcoded secrets, representing a 25% increase since a similar study was done a year ago.
Synopsys Accelerates Software-Defined Product Development with Virtualizer Native Execution on Arm
Synopsys’ new Virtualizer Native Execution on Arm hardware significantly speeds up virtual prototyping for automotive, HPC and IoT development workflows.
GitHub’s Enhanced Pull Request Merge Experience: Streamlining the DevOps Workflow
GitHub enhances the pull request experience with logical check grouping, improved rule enforcement and better accessibility — making DevOps workflows more efficient and intuitive.