How GitHub Plans to Secure npm After Recent Supply Chain Attacks
GitHub strengthens npm security after Shai-Hulud worm attack with mandatory 2FA, granular tokens, and trusted publishing to protect the open source supply chain.
HashiCorp Embraces Agentic AI to Streamline Management of IT
HashiCorp today added a slew of updates to its platform for managing and securing IT infrastructure, including integration with multiple automation frameworks and a preview of an ability to use artificial intelligence (AI) agents to provision infrastructure as code (IaC). Announced at the HashiConf 2025, the unit of IBM will this week showcase Project infragraph, […]
Chainguard Adds Curated Repository to Secure JavaScript Libraries
Chainguard launched curated JavaScript libra ries built on the SLSA framework to secure software supply chains and protect against NPM malware risks.
Open Letter Calls for Fundamental Change to Open Source Economics
Leading stewards of several major open source projects today issued a joint open letter calling for major changes to be made to the way the IT infrastructure used to support these initiatives is funded, operated and maintained. Posted on the Open Source Security Foundation (OpenSSF) website, the open letter signed by representatives from open source […]
Harness Extends Scope and Reach of AI Platform for Automating DevOps Workflows
Harness today previewed two additional modules for its artificial intelligence (AI) platform for DevOps that automate code maintenance and automatically rollback a deployment whenever an issue is detected. Additionally, Harness is adding an Architect Mode to the Harness AI platform that interactively engages DevOps engineers to design pipelines based on best practices for security, quality […]
The DevSecOps Career Path: What No One Tells You About Getting Started
DevOps teams across organizations are suddenly finding themselves responsible for security with no roadmap. One day, teams are focused on deployment velocity and infrastructure automation, the next day, they’re expected to understand threat modeling, vulnerability management and compliance frameworks. This shift isn’t happening by choice — it’s happening because traditional security approaches can’t keep pace […]
Hugging Face Opens GitHub Copilot Chat to Open-Source Models
Hugging Face’s new VS Code extension makes GitHub Copilot Chat more flexible, enabling developers to test open-source LLMs like DeepSeek and GLM 4.5.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Zencoder Adds CLI Edition of AI Agent That Generates Code
Zencoder this week added a command line interface (CLI) option to its artificial intelligence (AI) agent for creating code. Company CEO Andrew Filev said application development teams can use Zen CLI as an alternative to previous support for integrated development environments. The overall goal is to provide developers with a range of options to take […]
Is the Future of DevOps DaaS?
DevOps as a service (DaaS) is emerging as the next big shift in how organizations build, deploy and maintain their software pipelines. What started as do-it-yourself automation with Jenkins scripts and self-hosted Git servers has now become an increasingly complex ecosystem of tooling, governance and culture. The question now is whether companies really need to […]
From Legacy to GitOps: A Roadmap for Enterprise Modernization
Learn how enterprises can modernize legacy infrastructure with GitOps. A roadmap for automation, governance, and resilience at scale.
Shai-Hulud Attacks Shake Software Supply Chain Security Confidence
Being the Dune groupie that I am, I couldn’t pass up the chance to comment on the “Shai-Hulud” NPM attacks. What a clever name for a worm attack. But as the saying goes, “the spice must flow,” so let’s have a look at what is going on here. The Backbone: What Is NPM (and Why […]
Harness CEO Calls for Reimagining of CI/CD Workflows in the AI Era
Harness CEO Jyoti Bansal at an Unscripted 2025 event in New York today told attendees the time has come to reimagine how continuous integration/continuous delivery (CI/CD) platforms function in the age of artificial intelligence (AI). Rather than simply failing a build it’s now possible for the CI/CD platform to automatically fix issues that previously required […]
GitHub MCP Registry Launches as Central Hub for AI Development Tools
GitHub launches the MCP Registry, a centralized hub for discovering and deploying Model Context Protocol servers. Backed by partners like Figma, Postman, HashiCorp, and Dynatrace, the registry simplifies integration, boosts security, and accelerates AI-powered development workflows.
Honeycomb Adds Ability to Orchestrate Multiple AI Agents to Observability Platform
Honeycomb has added a Canvas framework for managing and orchestrating multiple artificial intelligence (AI) agents as they observe and query massive amounts of telemetry data. Morgante Pell, technical lead manager for engineering at Honeycomb, said Canvas is the latest extension to a series of Honeycomb Intelligence initiatives that, for example, provide access to an AI […]
OpenAI’s GPT-5-Codex: A Smarter Approach to Enterprise Development
OpenAI’s GPT-5-Codex is built for real-world enterprise software engineering, handling long-running tasks, complex refactoring, and intelligent code reviews with strong security and IDE integration.
Oracle Delivers Java 25 Edition of Venerable Programming Language for the AI Era
Oracle today announced the availability of Java 25, which provides capabilities that make it simpler to build both artificial intelligence (AI) applications. At the same time, Oracle also pledged to provide long-term support (LTS) for Java 25 for the next eight years. Chad Arimura, vice president of developer relations for Oracle, said this edition of […]
Why Automation Fails Without the Right QA Mindset
In the DevOps world, with its faster release cycles and continuous delivery, quality assurance (QA) cannot be sidelined until the end of the process. Companies that actively use automation achieve up to 60% faster release cycles compared to those relying solely on manual testing. However, automation alone is insufficient. Without the right QA mindset, moving […]
Pulumi Previews AI Agents Trained to Automate Infrastructure Management
Pulumi today revealed it is now making available in preview a set of artificial intelligence (AI) agents to its namesake infrastructure-as-code (IaC) platform that are capable of diagnosing issues and autonomously completing tasks when permitted. Company CEO Joe Duffy said Pulumi Neo adds a set of AI agents specifically trained to automate the management of […]
MongoDB Taps AI Agent to Launch Application Modernization Platform
MongoDB today unveiled an application modernization platform that makes use of artificial intelligence (AI) agents to analyze and convert legacy applications into code that can be used to deploy a modern application on its document database. Shilpa Kolhar, senior vice president of product and engineering for MongoDB, said the MongoDB Application Modernization Platform (AMP) will […]
CodeRabbit Adds CLI Support to Code Review Platform Based on AI
CodeRabbit expands its AI-powered code review platform with CLI support, auto unit test generation, custom pre-merge checks, and an MCP client. Backed by $60M in new funding, CodeRabbit helps developers catch routine issues, improve test coverage, and secure AI-generated code at scale.
Outages and Security Threats in DevOps Tooling: Cracks in the Foundation
Alan warns that DevOps toolchains — from GitHub to Jira — are showing cracks, with outages and breaches threatening delivery resilience. He urges platform engineers to design for failure, harden security, and rethink vendor trust to prevent fragile foundations from collapsing.
WhiteCobra Targets Developers with Dozens of Malicious Extensions
A threat group is dropping two dozen malicious extensions into the VSCode and Open VSX marketplaces, targeting developers using the VSCode, Cursor, and Windsurf source code editing tools with the goal of draining cryptocurrency wallets. Researchers with security firm Koi Security have been tracking WhiteCobra’s activities for more than a year as the bad actors […]