Social – X
JFrog CEO: No One Cares About Source Code Anymore
JFrog CEO Shlomi Ben Haim told approximately 500 software engineers today that in the age of artificial intelligence (AI) no one will soon care much about source code anymore. Speaking at the ...
GitOps in 2026: Why Pull Requests Are Taking Over Cloud Operations
For years, cloud infrastructure changes were mostly a mystery. An engineer would log into a dashboard, tweak a setting, run a few scripts, and that was it. Nobody worried until something broke ...
CrowdStrike Moves to Secure Software Supply Chains at the Endpoint
CrowdStrike today at its Fal.con 2026 conference extended its reach into the realm of software supply chain security with the addition of an offering that blocks malicious open-source packages at the endpoint ...
JFrog Moves to Secure Agentic Engineering Workflows
JFrog today at its swampUP 2026 conference added a zero touch remediation capability that ensures the most secure version of a binary is provided even when application developers request a version that ...
GitHub Puts Copilot in the Approval Seat for Pull Requests
Tom Smith | | AI code review, AI coding, AI Governance, automated code review, branch protection, code review, Copilot code review, developer productivity, developer tools, devops, Engineering Governance, github, GitHub approvals, GitHub Copilot, PR approvals, pull requests, software development, software lifecycleGitHub Copilot can now submit binding pull request approvals, moving AI code review from advisory feedback into the merge decision itself ...
Informing Stakeholders Isn’t the Same as Aligning Them
Vladimir Pronin | | change management, continuous delivery, devops, feature flags, progressive delivery, Stakeholder AlignmentThe first sign of trouble was a screenshot. We'd just switched on the A/B test via our feature management platform. Within the hour, a senior stakeholder landed in the variant feature flag, ...
Debian’s AI Vote Bets on Accountability Instead of a Ban
Tom Smith | | AI coding, AI Governance, AI policy, AI-assisted development, AI-generated code, code review, confidential data, Debian, developer productivity, devops, generative AI, Human Oversight, open source, software development, software securityDebian’s new AI contribution policy avoids bans and mandatory disclosure, instead making developers responsible for reviewing AI-generated work and protecting sensitive data ...
OpenAI Cuts Off Cursor’s Model Access After SpaceX Acquisition
OpenAI is ending Cursor’s direct access to its AI models after Elon Musk’s SpaceX acquired its parent company, Anysphere. This is the next move in the increasingly bitter conflict between Elon Musk ...
From Operator to Agent Manager: The Real Shift in Network Engineering
I've been saying for ten years that network automation was three years away from being the only way to do things. Every year I moved the goalposts, because the data never caught ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
Broadcom Launches TrueSource Service to Secure Spring Framework
Mike Vizard | | AI coding, Apache Tomcat, application security, Bitnami Secure Images, Broadcom, container security, dependency security, devsecops, java, kubernetes, node.js, open source security, open source vulnerabilities, patch management, Python, SBoM, secure software development, software artifacts, Software Supply Chain Security, Spring framework, Spring Security, Tanzu, TrueSource Trusted Artifacts, VMware explore, vulnerability managementBroadcom launches TrueSource Trusted Artifacts to provide hardened Spring dependencies, secure open source packages and automated vulnerability remediation ...
A Simple Website Summary Just Exposed the Limits of AI Coding Guardrails
Tom Smith | | agentic AI security, AI agent security, AI coding assistants, AI guardrails, AI security, Anthropic, Auto Mode, Claude Code, Claude Opus 5, devops security, indirect prompt injection, Johann Rehberger, network egress, platform engineering, prompt injection, Python module shadowing, RCE, remote code execution, sandboxing, struct.pyClaude Code’s Auto Mode was bypassed in an attack chain that turned a routine webpage summary into remote code execution, highlighting the limits of AI agent guardrails ...
