Social – X
Chainguard Expands Repository to Add More Secure Open Source Libraries
Mike Vizard | | AI agents, application security, dependency layer, devops best practices, DevSecOps practices, Open Source Security Foundation, open source vulnerabilities, secure open source libraries, secure repositories, SLSA framework, software artifacts, software builds, Software Supply Chain SecurityLearn how Chainguard is strengthening software supply chains by expanding its secure repository of Java, JavaScript, and Python libraries, enabling DevOps teams to access components compliant with SLSA framework standards ...
Unlocking Observability by Design With Inferred Schemas
Nicolas Takashi | | observability, OpenTelemetry, platform engineering, schema governance, telemetry pipelinesObservability systems generate massive telemetry, but schema drift creates friction. Learn how inferred schemas and OpenTelemetry Weaver restore structure ...
N. Korean Famous Chollima Hackers Use Malicious npm Packages to Steal Data
Jeff Burt | | Contagious Interview, Famous Chollima, infostealer, linux, macOS, malicious npm packages, Microsoft Windows, Pastebin, remote access trojan (RAT), Socket, software developers, typosquattingA group of more than two dozen malicious npm packages used to steal secrets and credentials from software developers has all the hallmarks – from infrastructure to operations – of Famous Chollima, ...
Eclipse Foundation Extends Scope and Reach of Open VSX Registry
Mike Vizard | | AI coding tools, application development, AWS, developer tools, digital sovereignty, encryption, exposed credentials, extension name spoofing, funding model, malicious pattern detection, multi-region architecture, namespace impersonation, rate limiting, security infrastructure, software security, Software Supply Chain, trusted environments.The Eclipse Foundation launches a new framework for the Open VSX Registry, enhancing security features and transitioning to a hybrid architecture. With support from AI tool provider Cursor, this initiative aims to ...
Context Engineering is the Key to Unlocking AI Agents in DevOps
Abhijit Ubale | | AI agents, automation, context engineering, context management, data governance, devops, incident management, kubernetes, memory architectures., Model Context Protocol, observability, operational complexity, performance optimization, production-grade agents, Productivity, scaling AI, selective context injection, structured memory, tool integration, workflow efficiencyExplore how context engineering is essential for transforming AI agents from experimental prototypes to reliable production tools in DevOps. Understand its impact on automation workflows, accuracy, and scalability ...
Why the Next Wave of Infrastructure Automation Requires a Different Kind of Intelligence
Every decade or so, something fundamental shifts in how we think about infrastructure. Not an upgrade, a rethinking. Virtualization changed what infrastructure was. The cloud changed where it lived. Infrastructure as Code ...
Microsoft Executives Warn AI Could Limit the Developer Talent Pipeline
Generative AI is transforming software development at remarkable speed. But in a new paper written by two Microsoft executives, Azure CTO Mark Russinovich and Scott Hanselman, VP of the developer community, argue ...
ControlMonkey Extends IaC Automation Reach to Restore Network Services
ControlMonkey has extended its platform for automating infrastructure-as-code (IaC) to add an ability to reprovision network services following a disruption in service. Company CEO Aharon Twizer said this extension to the Cloud ...
Postman Adds Ability to Invoke API Code From Within Git Workflows
Mike Vizard | | AI agents, AI integration, API catalog, API management, API specifications, automation, code visibility, developer productivity, developer tools, Git repositories, IT environment, rogue APIs, software engineering, State of the API Report, workflow efficiencyDiscover how Postman’s new feature allows software engineering teams to manage API specifications, collections, and environments directly from Git repositories, simplifying workflows for AI agents in the development process ...
Google ADK Opens the Door to AI Agents That Work Inside Your DevOps Toolchain
Tom Smith | | Agile workflows, AI agents, AI-Driven Development, AI/ML ecosystem, CI/CD, code management, database queries, devops, engineering workflows, GitHub integration, Google ADK, MPL-based integrations, observability, observability-native frameworks, Pinecone, project management tools, software development, system performance, telemetery, third-party integrations, workflow automationGoogle ADK adds integrations for GitHub, GitLab, Jira, MongoDB, and seven observability tools. AI agents can now work inside your DevOps toolchain ...
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
AI-Fueled Development Pushes Open-Source Risk to Extremes: Report
Artificial intelligence has shortened the timeline for software development from months to days. But according to new research, that acceleration is creating significant risks for security and compliance issues. Black Duck’s 2026 ...
