Sonar Acquires Tidelift to Extend DevSecOps Reach Into Open Source Software
Sonar today revealed it has agreed to acquire Tidelift to gain access to third-party open-source code that it plans to integrate into its static code analysis tools.
Google Extends Reach of AI Coding Tools to Third-Party DevOps Platforms
Google today previewed a set of extensions to its artificial intelligence (AI) coding tools that are designed to be integrated directly within a development environment.
The Implications of Architecture: Optimizing Developer Experience for Serverless Success
Realizing the benefits of serverless architecture and avoiding its pitfalls starts with understanding what it is and how it fits into the cloud computing ecosystem.
OpenText Allies With Secure Code Warrior to Improve Application Security
OpenText has partnered with Secure Code Warrior to make it simpler for application developers to learn best DevSecOps practices as needed.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Survey: Generative AI Spurring Rapid Expansion of Application Development in Next 12 Months
A global survey of 1,666 IT professionals finds that nearly three-quarters (74%), plan to build ten or more applications over the next 12 months, with nearly half (45%) planning to build 25 or more.
Nobl9 Simplifies Tracking SLOs Across Complex Workflows
Nobl9 this week added an ability to combine multiple service level objectives (SLOs) into one logical entity that DevOps teams can combine to more easily track specific user journeys and processes.
Google Previews Jules AI Agent to Automate Software Engineering Tasks
Google today previewed an experimental edition of the Jules coding agent, that makes use of next-generation multimodal Gemini 2.0 models to automate coding tasks. Designed to be integrated with code repositories such as GitHub, Julles is capable of creating and executing multi-step plans and processes, including modifying multiple files, preparing pull requests and fixing bugs […]
The Anti-Pattern of Standard Practices in Agile & DevOps — and the Antidote: IDP
By acting as the centralized enabler, an IDP transforms fragmented practices into a cohesive, governed system that drives speed, efficiency and safe innovation.
Shift Left Has Stalled: Here’s How We Can Get It Moving Again
To kick-start shift left again, we need to refocus on empowering developers with tools that make this post-coding work more efficient and less cumbersome.
Best Practices for CI/CD Migration: The GitHub Enterprise Example
Here’s a look at challenges to navigate, along with tips on how to make CI/CD migration as smooth as possible.
DefectDojo Adds Ability to Normalize DevSecOps Data to ASPM Platform
DefectDojo today added a universal parser to its application security posture management platform (ASPM) that makes it possible to normalize data ingested from any DevSecOps tools and platforms that expose data in a JSON or XML format.
Report Shines Spotlight on Open Source Software Security Challenges
An analysis of more than five million open-source software packages published by Lineaje, a provider of a platform for tracking open-source software components, finds 95% of security issues involve some type of open-source software package dependency, with more than half (51%) of the vulnerabilities discovered having no known existing fix available.
Exploring Cloud Costs and Cost-Saving Strategies
As the cloud becomes the operating model for a company, effective cloud cost management becomes critical for the organization’s health.
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Linux Foundation Report Spotlights Open Source Software Package Challenges
The Linux Foundation in collaboration with multiple providers of software composition analysis (SCA) published a study this week, that in addition to identifying the most widely used software packages, also shined a light on fundamental challenges the open source community needs to address.
Data Pipeline Modernization in 2025 Hinges on Unifying DevOps, DataOps and Database Workflows
Data pipelines are growing exponentially larger and more complex every year, thanks to artificial intelligence (AI)/machine learning (ML) and other data-centric innovations.
The Day a Software Update Broke Corporate America
For organizations prioritizing resilience, adopting infrastructure-agnostic solutions that enable seamless workload management across platforms should be at the top of the list.
How Cloud Costs can be Lowered and How Cloud Tooling can be Delivered at a Lower Cost
For businesses running on Amazon Web Services (AWS), it is easy to get caught off guard by the escalating cloud costs. One minute you are taking advantage of AWS’s incredible scalability and diverse service offerings, and the next you are facing an unexpectedly high bill.
Code Busters: Are Ghost Engineers Haunting DevOps Productivity?
A study coming out of Stanford University conducted by software engineering productivity specialist Yegor Denisov-Blanch claims that developer teams are rife with so-called ghost engineers who do virtually no work.
SOUTHWORKS – Cloud-Agnostic Platforms Will Drive New Possibilities in Multi-Cloud
Cloud customers are flocking towards a new approach as the classic option of relying on a single go-to provider is falling out of favor.
AWS Adds Declarative Policies Capability to Reduce DevSecOps Friction
Amazon Web Services (AWS) this week added a declarative policies capability that promises to reduce the level of DevSecOps friction that far too many software engineering teams continue to encounter.
Red Hat Adds Managed Instance of Ansible to Expanding AWS Portfolio
Red Hat this week made available a managed instance of the Ansible automation framework on the Amazon Web Services (AWS) cloud.