New Relic Adds Open Source Tool to Observe AI Coding
New Relic has made available an open source extension to its observability platform for coding tools at no additional cost. Nic Benders, chief technical strategist for New Relic, said the New Relic AI Coding Observability capability will make it simpler for DevOps teams to centrally monitor usage of a diverse range of artificial intelligence (AI) […]
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these challenging economic times is to make it just that much easier for DevOps professionals to advance their careers. Of course, the pool of […]
Respect and Trust as DevOps Engineering Disciplines
Respect and trust are DevOps engineering disciplines. They shape flow, quality, security, reliability, and adaptation.
Moonshot AI’s Kimi K2.7-Code Targets Token Efficiency in Agentic Coding
Moonshot AI’s Kimi K2.7-Code offers 30% lower token usage and a 21.8% coding benchmark gain — here’s what DevOps teams need to know about the open-source release.
GitHub Removes PAT Requirement for Agentic Workflows
GitHub Agentic Workflows can now use GitHub Actions’ built-in GITHUB_TOKEN instead of a personal access token (PAT). That means developers no longer need to create, store, or rotate a PAT to run agentic workflows, eliminating both the operational hassle and the security risks that come with managing long-lived tokens at scale.
AI Is Here to Stay. The Real Challenge Is Operating It Securely
AI-generated code is already in production. Whether we are comfortable with that or not is beside the point. In the OpenStack project, which I have helped steward for more than 15 years, we are seeing developers submit patches built with AI assistance, and sometimes patches composed almost entirely by AI tools. Some of those contributions […]
Stack Overflow Is Being Reborn as a Back-End Service for AI Agents
Will that stop its decline? We’ll soon find out. Once upon a time, Stack Overflow was, love it or hate it, the site programmers went to find answers for their most annoying development questions. Back then, according to Prashanth Chandrasekar, Stack Overflow’s CEO, the site had “100 million monthly visitors.” Then AI came along. From […]
Why Endpoint Protection Matters More than Ever in CI/CD Environments
CI/CD environments depend on far more than repositories and deployment infrastructure. Developer endpoints hold sensitive data: cloud credentials, SSH keys, deployment permissions, direct access to internal systems. Endpoint security and control are part of daily operational risk management. Engineering teams are shifting more and more toward distributed workflows, so discussions around CI/CD security include the […]
Cohere’s North Mini Code Lets Devs Stack Their Own AI
Toronto startup Cohere has released an open-weight model designed for developers to use to build their own AI stack. The open-weight North Mini Code is a 30-billion-parameter “mixture-of-experts” (MoE) model. MoE equips a model with specialized neural nets for individual tasks, such as mathematics and code generation. Mistral pioneered this approach to compete with larger […]
Survey Surfaces Depth of DevSecOps Crisis in the Age of AI
A global survey of 2,350 developers, CISOs and application security managers published this week finds that while nearly all respondents (96%) work for organizations that have embedded or connected artificial intelligence (AI) code and tools into some aspect of their application development workflows, nearly half of all code (49%) running in production environments was AI-generated […]
From Pilots to Performance: Why Enterprise Flow is the New Competitive Advantage
Flow: Not a buzzword, but a discipline. Those that master it will be the ones that turn transformation ambition into transformation results.
Using Bicep Modules to Build Enterprise-Grade Azure Infrastructure
Azure Bicep has become the preferred IaC language for Azure because it’s declarative, simple, modular and deeply integrated with the Azure platform.
Shift Left to the Developer’s Machine: Building Local Git Security Gates
Shift left to the developer’s machine. The principle is what matters: Stop secrets before they ship. The tooling is a means to that end.
Why Your Observability Stack Is Costing You More Than Your Cloud Bill
There’s a pattern playing out across engineering teams right now that nobody talks about openly: the tool meant to reduce operational complexity has quietly become one of the biggest line items on the infrastructure budget. Observability spending is out of control, and for most teams, it’s not because they’re monitoring too much. It’s because they’re […]
Anthropic Reverses Course on Hidden AI Restrictions Following Developer Backlash
Anthropic has abruptly walked back a controversial, unannounced policy that degraded the performance of its latest model, Claude Fable 5. The reversal follows intense backlash from the machine learning community, which criticized the company for a lack of transparency and anti-competitive behavior, according to a Wired report. The controversy began earlier this week with the […]
npm v12 Is Coming in July — Here’s What Developers Need to Do Now
For years, running npm install meant trusting that whatever code got pulled in would behave itself. That trust was often misplaced. Starting in July 2026, npm v12 changes the rules. Install scripts won’t run automatically anymore. Neither will dependencies be pulled from Git repos or remote URLs. All of it becomes opt-in. This is a […]
Datadog Leverages AI to Extend Observability Reach Deeper into DevOps Workflows
Datadog this week significantly extended the reach of its Bits artificial intelligence (AI) framework to enable DevOps teams to automatically discover and resolve issues based on the telemetry data collected by its observability platform. Announced at the company’s DASH 2026 conference, Datadog is now embedding an AI coding tool, dubbed Bits Code, across its entire […]
Security Flaw in Claude Code Illustrates the Risk of AI in Developer Workflows
AI coding agents are reshaping software development—but they’re also expanding the attack surface. Researchers uncovered a now-patched vulnerability in Anthropic’s Claude Code GitHub Action that could have enabled prompt injection attacks to expose CI/CD secrets, API keys, and credentials. As AI agents gain autonomy in development workflows, organizations must treat untrusted inputs as hostile and rethink CI/CD security models. Natural language is becoming executable code—and attackers know it.
Still Using API Keys for Your AI Agent? Here’s When it’s Time to Upgrade
API keys got you here. They won’t get you where you’re going. OAuth isn’t a future upgrade. It’s the foundation your agents should have been built on from the start.
Carbon-Aware DevOps: Turning CI/CD Pipelines Into Emissions-Controlled Workloads
This article examines how a Carbon-Aware DevOps strategy can help optimize CI/CD pipelines for sustainability by reducing their carbon footprint while also decreasing costs and meeting the increasing demand for innovative, eco-friendly solutions.
GitLab Previews Revamped DevOps Platform for the Agentic AI Era
At Transcend 2026, GitLab launched updates to optimize its DevOps platform for AI-generated code, featuring Next Gen Source Code Management, GitLab Orbit, and an AI Governance framework.
When the Structure Becomes the Culture
Why micro teams and rotation reshape culture, not just throughput, in modern SRE. Most SRE leaders design teams around the systems they own. We designed ours around movement. We introduced micro teams expecting a throughput story: smaller groups, tighter scope, faster work. Some of that arrived. What we had not budgeted for was how much […]
Survey Surfaces Emerging DevOps Bottlenecks in the AI Coding Era
New Black Duck survey reveals AI coding tools boost developer productivity but create critical bottlenecks in manual reviews, code rework, and security vulnerabilities.