News
DORA 2025: Faster, But Are We Any Better?
Jenn Yarnold | | AI-assisted software development, amplification, culture & practices, developer productivity, DORA research, organizational systems, research report, strategic AI investmentThe 2025 DORA Report — The State of AI-assisted Software Development by DORA / Google Cloud — introduces the DORA AI Capabilities Model, arguing that AI functions best as an amplifier of ...
HashiCorp Embraces Agentic AI to Streamline Management of IT
Mike Vizard | | HashiCorp Cloud Platform HCP, Infrastructure as Code (IaC), IT infrastructure lifecycle management, Model Context Protocol MCP server, Project infragraph, secrets management, Vault Enterprise 1.21, zero trust automationHashiCorp today added a slew of updates to its platform for managing and securing IT infrastructure, including integration with multiple automation frameworks and a preview of an ability to use artificial intelligence ...
Chainguard Adds Curated Repository to Secure JavaScript Libraries
Mike Vizard | | curated JavaScript libraries, DevSecOps practices, JavaScript dependency security, malware in open source, NPM security, open source software security, secure artifact management, secure software supply chain, Shai-Hulud, SLSA frameworkChainguard launched curated JavaScript libra ries built on the SLSA framework to secure software supply chains and protect against NPM malware risks ...
Harness Extends Scope and Reach of AI Platform for Automating DevOps Workflows
Mike Vizard | | AI for DevOps, AI in software delivery, AI observability integration, AI rollback, Architect Mode DevOps, autonomous code maintenance, devops automation, internal developer portal AI, release orchestration AIHarness today previewed two additional modules for its artificial intelligence (AI) platform for DevOps that automate code maintenance and automatically rollback a deployment whenever an issue is detected. Additionally, Harness is adding ...
CodeRabbit Adds CLI Support to Code Review Platform Based on AI
Mike Vizard | | AI code review, AI coding tools, AI in DevOps, AI trust layer, CLI support, code dependencies, code graph analysis, custom pre-merge checks, developer productivity, DevOps workflows, Git repositories, MCP client, Model Context Protocol, open source code review, secure code review, software quality, unit test generationCodeRabbit expands its AI-powered code review platform with CLI support, auto unit test generation, custom pre-merge checks, and an MCP client. Backed by $60M in new funding, CodeRabbit helps developers catch routine ...
WhiteCobra Targets Developers with Dozens of Malicious Extensions
Jeff Burt | | cryptocurrency, LummaStealer, malicious extensions, malware, Open VSX, VSCode, WhiteCobraA threat group is dropping two dozen malicious extensions into the VSCode and Open VSX marketplaces, targeting developers using the VSCode, Cursor, and Windsurf source code editing tools with the goal of ...
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
OpenTelemetry Extensions to Enable Observability of AI Agents
Mike Vizard | | AI agents, AI observability, AI-driven IT automation, DevOps observability, LLM telemetry, observability, OpenTelemetry, OpenTelemetry semantic extensions, telemetry collection, Telemetry data, time-series data analysisOpenTelemetry is extending support for AI agents, enabling unified observability across apps and intelligent automation of IT tasks. Discover how Cisco and Splunk are driving this next phase of telemetry innovation ...
Hush Security Emerges to Eliminate Need for Application Secrets
Mike Vizard | | AI agent security, API key protection, application secrets management, cloud-native security, CNCF SPIFFE, credential theft prevention, credential-free security, DevSecOps secrets management, just-in-time access controls, microservices secrets, runtime identity controls, secrets discovery, secrets sprawl, SPIFFE runtime access, zero trust secretsHush Security today emerged from stealth to provide an alternative approach to protecting application secrets using a platform that is designed to continuously discover them and then apply access controls based on ...
DevGovOps, A New Play on DevOps, or is It?
Jenn Yarnold | | AI Governance, AI supply chain security, artifact trust, compliance in CI/CD, DevGovOps, devops evolution, DevOps governance, DevSecOps vs DevGovOps, enterprise AI compliance, governance automation, governance in DevOps, JFrogswampUp2025, platform governance, responsible AI adoption, shadow AI management, software supply chain complianceDevGovOps is emerging as the next evolution of DevOps, embedding governance into software delivery pipelines. At JFrog’s SwampUP 2025, governance, AI supply chains, and compliance took center stage—positioning DevGovOps as essential for ...
JFrog CEO: AI Agents Require Practices Beyond Security, Traceability
NAPA, Calif. -- A new persona in software development, artificial intelligence (AI) agents rather than human developers, has made it imperative that foundational platforms incorporate agentic practices alongside security, traceability, and visibility ...
Survey: Most IT Teams Not Prepared to Manage AI Workloads
Mike Vizard | | AI deployment challenges, AI Governance, AI operations challenges, AI workload observability, AI workload scaling, cloud cost management, IaC tools, infrastructure as code, infrastructure scalability, IT automation readiness, IT infrastructure automation, IT infrastructure modernization, IT skill gaps, platform engineering, Terraform automationA ControlMonkey survey of 300 IT leaders finds most organizations are unprepared to scale AI workloads, citing automation gaps, reliability, skills shortages, and cost challenges. Modernizing infrastructure management with IaC is critical ...
