News

CodeRabbit Adds CLI Support to Code Review Platform Based on AI

Mike Vizard | September 16, 2025 | AI code review, AI coding tools, AI in DevOps, AI trust layer, CLI support, code dependencies, code graph analysis, custom pre-merge checks, developer productivity, DevOps workflows, Git repositories, MCP client, Model Context Protocol, open source code review, secure code review, software quality, unit test generation

CodeRabbit expands its AI-powered code review platform with CLI support, auto unit test generation, custom pre-merge checks, and an MCP client. Backed by $60M in new funding, CodeRabbit helps developers catch routine ...

WhiteCobra Targets Developers with Dozens of Malicious Extensions

Jeff Burt | September 15, 2025 | cryptocurrency, LummaStealer, malicious extensions, malware, Open VSX, VSCode, WhiteCobra

A threat group is dropping two dozen malicious extensions into the VSCode and Open VSX marketplaces, targeting developers using the VSCode, Cursor, and Windsurf source code editing tools with the goal of ...

Five Great DevOps Job Opportunities

Mike Vizard | September 15, 2025 | careers, cloud, devops, jobs, software engineering

DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...

Oracle, Java, OpenTelemetry, agentic AI, developers,

OpenTelemetry Extensions to Enable Observability of AI Agents

Mike Vizard | September 12, 2025 | AI agents, AI observability, AI-driven IT automation, DevOps observability, LLM telemetry, observability, OpenTelemetry, OpenTelemetry semantic extensions, telemetry collection, Telemetry data, time-series data analysis

OpenTelemetry is extending support for AI agents, enabling unified observability across apps and intelligent automation of IT tasks. Discover how Cisco and Splunk are driving this next phase of telemetry innovation ...

Hush Security Emerges to Eliminate Need for Application Secrets

Mike Vizard | September 10, 2025 | AI agent security, API key protection, application secrets management, cloud-native security, CNCF SPIFFE, credential theft prevention, credential-free security, DevSecOps secrets management, just-in-time access controls, microservices secrets, runtime identity controls, secrets discovery, secrets sprawl, SPIFFE runtime access, zero trust secrets

Hush Security today emerged from stealth to provide an alternative approach to protecting application secrets using a platform that is designed to continuously discover them and then apply access controls based on ...

DevGovOps, JFrog, AI, Governance, CRA, compliance, continuous compliance, validated, devops, liability, software, compliance Checkly Palo Alto Networks Checkov

DevGovOps, A New Play on DevOps, or is It?

Alan Shimel | September 10, 2025 | AI Governance, AI supply chain security, artifact trust, compliance in CI/CD, DevGovOps, devops evolution, DevOps governance, DevSecOps vs DevGovOps, enterprise AI compliance, governance automation, governance in DevOps, JFrogswampUp2025, platform governance, responsible AI adoption, shadow AI management, software supply chain compliance

DevGovOps is emerging as the next evolution of DevOps, embedding governance into software delivery pipelines. At JFrog’s SwampUP 2025, governance, AI supply chains, and compliance took center stage—positioning DevGovOps as essential for ...

JFrog CEO: AI Agents Require Practices Beyond Security, Traceability

Jon Swartz | September 9, 2025 | agentic AI, github, JFrog Fly, JFrog swampUP 2025, MCP, NVIDIA, ServiceNow

NAPA, Calif. -- A new persona in software development, artificial intelligence (AI) agents rather than human developers, has made it imperative that foundational platforms incorporate agentic practices alongside security, traceability, and visibility ...

ControlMonkey, Black duck, survey, Checkmarx, vulnerable code,

Survey: Most IT Teams Not Prepared to Manage AI Workloads

Mike Vizard | September 9, 2025 | AI deployment challenges, AI Governance, AI operations challenges, AI workload observability, AI workload scaling, cloud cost management, IaC tools, infrastructure as code, infrastructure scalability, IT automation readiness, IT infrastructure automation, IT infrastructure modernization, IT skill gaps, platform engineering, Terraform automation

A ControlMonkey survey of 300 IT leaders finds most organizations are unprepared to scale AI workloads, citing automation gaps, reliability, skills shortages, and cost challenges. Modernizing infrastructure management with IaC is critical ...

vibecoding, shadow, vibecoding vibe, coding, GitHub, agents, Gemini, Canvas, Gemini, code, Augment Code, code, kernel compliance-as-code software secure software Terraform infrastructure

Empromptu Unveils Vibecoding Platform for Building Enterprise-Class Apps

Mike Vizard | September 9, 2025 | AI app scalability, AI application development, AI coding platform, AI coding tools, AI developer workflows, AI DevOps, AI output controls, AI response optimization, AI vs low-code platforms, enterprise AI applications, enterprise software development, explainable AI, LLMOps, RAG, retrieval-augmented generation, SOC-2 compliant AI, vibecoding

Empromptu has launched its AI coding platform for building enterprise-class applications, featuring RAG, LLMOps, explainability, and SOC-2 compliance. Designed for scalability, accuracy, and predictable pricing, it aims to outperform vibecoding tools and ...