Legit Security Adds Ability to Scan Personal GitHub Repositories for Secrets
Legit Security today extended its ability to scan for secrets in software to include any that might reside in the personal GitHub repositories of application developers.
Tabnine Adds Ability to Track Provenance of Code Generated by AI Models
Tabnine this week previewed an ability to track the provenance and attribution of code that if generated by a large language model (LLM) might create potential liabilities for organizations that included it as an application.
Sonar Acquires Tidelift to Extend DevSecOps Reach Into Open Source Software
Sonar today revealed it has agreed to acquire Tidelift to gain access to third-party open-source code that it plans to integrate into its static code analysis tools.
Google Extends Reach of AI Coding Tools to Third-Party DevOps Platforms
Google today previewed a set of extensions to its artificial intelligence (AI) coding tools that are designed to be integrated directly within a development environment.
OpenText Allies With Secure Code Warrior to Improve Application Security
OpenText has partnered with Secure Code Warrior to make it simpler for application developers to learn best DevSecOps practices as needed.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Survey: Generative AI Spurring Rapid Expansion of Application Development in Next 12 Months
A global survey of 1,666 IT professionals finds that nearly three-quarters (74%), plan to build ten or more applications over the next 12 months, with nearly half (45%) planning to build 25 or more.
Nobl9 Simplifies Tracking SLOs Across Complex Workflows
Nobl9 this week added an ability to combine multiple service level objectives (SLOs) into one logical entity that DevOps teams can combine to more easily track specific user journeys and processes.
Google Previews Jules AI Agent to Automate Software Engineering Tasks
Google today previewed an experimental edition of the Jules coding agent, that makes use of next-generation multimodal Gemini 2.0 models to automate coding tasks. Designed to be integrated with code repositories such as GitHub, Julles is capable of creating and executing multi-step plans and processes, including modifying multiple files, preparing pull requests and fixing bugs […]
DefectDojo Adds Ability to Normalize DevSecOps Data to ASPM Platform
DefectDojo today added a universal parser to its application security posture management platform (ASPM) that makes it possible to normalize data ingested from any DevSecOps tools and platforms that expose data in a JSON or XML format.
Report Shines Spotlight on Open Source Software Security Challenges
An analysis of more than five million open-source software packages published by Lineaje, a provider of a platform for tracking open-source software components, finds 95% of security issues involve some type of open-source software package dependency, with more than half (51%) of the vulnerabilities discovered having no known existing fix available.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Linux Foundation Report Spotlights Open Source Software Package Challenges
The Linux Foundation in collaboration with multiple providers of software composition analysis (SCA) published a study this week, that in addition to identifying the most widely used software packages, also shined a light on fundamental challenges the open source community needs to address.
Code Busters: Are Ghost Engineers Haunting DevOps Productivity?
A study coming out of Stanford University conducted by software engineering productivity specialist Yegor Denisov-Blanch claims that developer teams are rife with so-called ghost engineers who do virtually no work.
AWS Adds Declarative Policies Capability to Reduce DevSecOps Friction
Amazon Web Services (AWS) this week added a declarative policies capability that promises to reduce the level of DevSecOps friction that far too many software engineering teams continue to encounter.
Red Hat Adds Managed Instance of Ansible to Expanding AWS Portfolio
Red Hat this week made available a managed instance of the Ansible automation framework on the Amazon Web Services (AWS) cloud.
AWS Extends Generative AI Reach and Scope of Amazon Q Developer
Amazon Web Services (AWS) today revealed it has extended the capabilities of its generative artificial intelligence (AI) tool.
Five Great DevOps Job Opportunities
The five great opportunities shared this week include DevOps engineer roles at Palo Alto Networks and the Federal Reserve Bank of Boston.
AWS Extends Generative AI Reach to Third-Party IT Platforms
Amazon Web Services (AWS) has extended the reach of its generative artificial intelligence (AI) platform for application development to include a set of plug-in extensions, that make it possible to launch natural language queries against data residing in platforms from Datadog and Wiz.
Mezmo Simplifies Management of Telemetry Data to Reduce Observability Costs
Mezmo has added a more opinionated option to its platform for managing telemetry data that makes it simpler to add additional sources and ultimately reduce the volume data being collected to help reduce overall costs.
AWS Extends Reach of Authentication Service to Include Support for Passkeys
Amazon Web Services (AWS) has updated its authentication service to make it simpler for software engineering teams to eliminate passwords. In addition to now adding support of passkey authentication based on public key cryptography and biometrics to the Amazon Cognito service, the Amazon Cognito service already supports one-time-passwords over email and SMS connection. Passkey support […]
Microsoft Enlists Endor Labs to Integrate SCA Tool with CNAPP
Microsoft has tapped Endor Labs to incorporate a software composition analysis (SCA) tool into its cloud-native application protection platform (CNAPP).
Five Great DevOps Job Opportunities
The five DevOps job postings shared this week include various roles at GovCIO, Mayo Clinic, Wiz, BMC and Citi.