Pulumi Extends Security Reach to Include Managing Secrets and Policy-as-Code
Pulumi today extended the reach of its Environments, Secrets and Configurations (ESC) platform for managing infrastructure-as-code (IaC) into the realm of DevSecOps by adding the ability to manage secrets and implement policies.
Imandra Extends Symbolic AI Model to Validate Source Code
Imandra today launched an artificial intelligence (AI) agent, dubbed CodeLogician, that uses symbolic models to transform source code into mathematical models that can then be validated and tested in a way that is more accurate than relying on a large language model (LLM).
ControlMonkey Adds Disaster Recovery Capability to IaC Platform
ControlMonkey today added a disaster recovery module to its namesake software-as-a-service (SaaS) platform for automating the management of infrastructure-as-code tools based on open-source Terraform software. Company CEO Aharon Twizer said that Automate Disaster Recovery makes it possible to reduce by 90% the amount of time required to restore cloud configurations, networking, security policies and other […]
Five Great DevOps Job Opportunities
Are you looking for a career change? Then browse our weekly five great DevOps job opportunities where you might find your next move!
Google’s OSV-Scanner V2: Leveling Up Vulnerability Management for Developers
Google’s OSV-Scanner V2.0.0 brings enhanced vulnerability scanning with container support, interactive visualizations, and innovative remediation features.
GitLab 17.10: Enhancing Developer Experience with AI-Powered Code Review and Root Cause Analysis
GitLab 17.10 introduces Duo Code Review and Root Cause Analysis for self-hosted environments, along with enhanced metrics visualization and markdown improvements.
DAST is Broken, Not Dead. Dynamic Testing Must Evolve
Rebranding DAST isn’t about slapping a new label on the same old toolset — it is about demanding more from vendors and shifting the way we think about security testing.
Why API-First Engineering is the Way Forward for Software Development
An API-first engineering strategy aims to enhance developer experience and productivity by providing an API marketplace with improved discoverability, enabling developers to quickly find the resources they need.
Blending AI and DevSecOps: Enhancing Security in the Development Pipeline
Exploring how businesses can secure their development pipelines by integrating AI into DevSecOps and adopt a more proactive approach.
Perforce Acquires Snowtrack to Improve Collaboration Across Application Development Teams
Perforce Software this week acquired Snowtrack, a provider of version control software used by application designers, to foster greater collaboration with software engineering teams.
Top 4 Considerations to Keep in Mind When Vetting Developers
A strong developer relationship is characterized by transparency and trust in all aspects of project development, efficient ongoing communication and clarity around expectations at every stage.
Survey Surfaces IT Infrastructure Automation Shortfalls
A survey of 413 infrastructure decision-makers and influencers published today finds nearly half (45%) believe their organization has achieved a high level of infrastructure automation.
Sideko Launches Platform to Automate API Ecosystem Management
Sideko’s new platform automates API documentation and tools maintenance, helping enterprises like Prudential scale API programs while preparing for AI integration.
Streamlining App Development with Gemini’s New Canvas Feature
Gemini’s new Canvas feature transforms app development workflows with real-time collaboration, code preview capabilities and seamless prototyping for developers of all skill levels.
Oracle Unveils Java 24 with Focus on AI Integration, Post-Quantum Cryptography and Developer Experience
Oracle releases Java 24 with new AI capabilities, post-quantum cryptography and simplified programming features while celebrating 30 years of Java innovation.
Futurum Research Report Surfaces Increasing DevOps Adoption of AI
A survey of 855 IT decision-makers conducted by The Futurum Group finds artificial intelligence (AI) is increasingly being viewed as playing a critical role in the development and deployment of software.
GitHub Action Compromise Risks Data Leaks for 23,000 Repositories
The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories.
Five Great DevOps Job Opportunities
The five DevOps job postings shared this week include opportunities at Spotify, Ace Hardware Corp., and Boeing Intelligence and Analytics.
Semaphore Goes Open Source: A New Dawn for DevOps Professionals
Semaphore’s CI/CD platform goes open source under Apache 2.0, offering DevOps professionals a scalable solution without vendor lock-in. Explore how this changes the game.
Consortium Driving OpenStack to Become Arm of The Linux Foundation
The Open Infrastructure Foundation (OpenInfra), which oversees the development of the open source OpenStack cloud computing framework, this week agreed to become an arm of The Linux Foundation as part of an effort to foster more collaboration with maintainers of projects such as Kubernetes and the Linux operating system.
Cycloid Adds Ability to Customize Components of a Software Stack to DevOps Platform
Cycloid today extended its platform for managing and governing software engineering workflows to provide DevOps teams with more granular control over how stacks of software components are constructed and managed.
Eclipse Foundation to Release Open Source IDE Infused with AI Agents
The Eclipse Foundation today made available an alpha release of an instance of its open source Theia integrated development environment (IDE), that provides access to artificial intelligence (AI) agents that will automate a wide range of coding tasks on behalf of application developers.
Bridging the Dev and SecOps Gap: How Intelligent Continuous Security Enables True End-to-End Security
Intelligent Continuous Security (TM) (ICS) is the next evolution — harnessing AI-driven automation, real-time threat detection and continuous compliance enforcement to eliminate these inefficiencies. ICS extends beyond DevSecOps to also close security gaps with SecOps, ensuring end-to-end continuous security across the entire software lifecycle.