Endor Labs Adds Ability to Identify Open Source AI Models to SCA Tool
Endor Labs today added an ability to detect open-source artificial intelligence (AI) models downloaded from the Hugging Face repository that have been incorporated into source code.
Reality Check: Current State of AI Code Generation Tools
AI code generation tools show promise but face real-world challenges. Analysis reveals the current state of the technology and what it means for development teams.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Endor Labs Forks Semgrep to Opengrep for Static Code Analysis
Software application development lifecycle (SDLC) analysis company Endor Labs has worked with a cadre of industry partners to now launch Opengrep, a toolset designed to ensure static software application code analysis remains open and accessible.
The State of Application Risk: Key Findings Reveal Widespread Security Vulnerabilities
New research reveals that 100% of organizations face critical app security risks. Learn key findings and essential steps to protect your software development pipeline.
DryRun Security Defines Application Security Policies Using Natural Language
DryRun Security today added an ability to use natural language to define and enforce application security policies as application developers build software.
Bitbucket Cloud’s “Hard Down” Outage Highlights DevOps Dependencies
Explore how Atlassian’s recent Bitbucket Cloud outage impacted global DevOps teams and what it reveals about cloud service dependencies in modern development.
Devin’s Latest Update Brings Major Enterprise Features and Developer Improvements
Cognition AI’s Devin update introduces enterprise management, smarter repository handling, and flexible billing, making AI-assisted development more practical at scale
Five Great DevOps Job Opportunities
Perhaps you’re looking to assume a new office? Browse these five great DevOps job opportunities for some timely inspiration!
Cloudsmith Adds Portals to Streamline Delivery of Software Artifacts
Cloudsmith has added a software distribution platform that streamlines the distribution of artifacts and provides access to analytics, through which DevOps teams can track how individual software packages are being consumed.
Report Surfaces DevSecOps Progress Despite Decline in Developer Training
An analysis of 121 organizations published this week by Black Duck Software finds a 67% increase in organizations performing software composition analysis (SCA) on code repositories and a 22% rise in the number of organizations creating software bills of materials.
Meet the 2024 DevOps Dozen Awards Winners
Each year, the DevOps Dozen Awards recognize the best and brightest in the DevOps community and industry, celebrating individuals and organizations making a significant impact. The 2024 DevOps Dozen Awards continue this tradition by honoring those driving innovation, transformation, and excellence in DevOps practices, tools, and leadership. We are thrilled to announce the winners of […]
Pythagora AI Makes Iterative AI Coding Tool Widely Available
Pythagora AI today made generally available an artificial intelligence (AI) coding tool that is designed to more interactively enable application developers to automate the writing of code and streamline debugging workflows.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
CISA Pushes Steps to Better Secure Software and Product Designs
The country’s top cybersecurity agency is urging developers to take steps to ensure the software they’re building and the products they roll out are secure and protect end users. The Cybersecurity and Infrastructure Security Agency (CISA) this week rolled out a series of recommendations that it wants businesses and critical infrastructure organizations to adopt to […]
Survey: AI Tools are Increasing Amount of Bad Code Needing to be Fixed
Survey findings include respondents noted that AI tools are increasing the blast radius of the amount of bad code that needs to be debugged.
IBM Survey Surfaces Multiple Software Engineering Challenges in the AI Era
A survey of 1,063 developers published today finds nearly all (99%) are using coding tools infused with artificial intelligence (AI) capabilities, but a third (33%) have since identified a lack of a standardized AI development processes and the lack of an ethical and trusted AI lifecycle that ensures transparency and traceability of data as the […]
Quali Extends Reach and Scope of Platform for Provisioning IT Environments
Quali has added a bevy of capabilities to its Torque platform for provisioning IT environments, including an AI copilot and a Cloud Curate tool that can be used to create infrastructure-as-code (IaC) based on existing configurations it discovers in cloud services.
Fake Stars in GitHub a Growing Security Threat, Analysis Finds
There was a surge of inauthentic stars on code repositories in 2024, ramping up the threat of software supply chain attacks.
Five Great DevOps Job Opportunities
New year, new job? Browse our weekly selection of job opportunities for DevOps professionals and find your next career move, in 2025.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Perforce Forks Puppet, Community Considers Muppet
DevOps platform company Perforce is forking Puppet, the open-source configuration management technology it acquired in May 2022.
RunSafe Security Extends Platform Reach to Build More Accurate SBOMs
RunSafe Security this week added an ability to generate a software bill of materials (SBOM) based on the code actually included in an application before it is deployed in a production environment.