What is OPA (Open Policy Agent)?
Open Policy Agent (OPA) is a versatile policy engine designed to handle policy enforcement across cloud infrastructures. It enables users to define and apply policies consistently across a variety of systems, helping maintain security and compliance in dynamic environments. In my view, OPA represents a significant step forward for cloud infrastructure. From experience, unless a […]
Anthropic Acquires Bun to Accelerate AI Coding Tools
Anthropic says it has acquired Bun, a high-performance JavaScript toolkit, to turbocharge its artificial intelligence (AI) coding capabilities — further underscoring a significant push into developer tooling as it scales Claude Code, its code-generation platform. Financial terms of the deal were not disclosed, but Anthropic emphasized that Bun will remain open source and MIT-licensed. The […]
AWS Transform Modernizes Any Codebase, App, API or Runtime
Platforms, paradigms, processes and processing itself all evolve. Because the information technology industry crosses from one chasm to another on an apparently endless loop of perpetual change, applications and wider systems need to be almost continually modernized. Amazon Web Services wants to enable that process with AWS Transform, a service that now ships with new […]
How Open Source Tools Simplify DevOps for Startups
In recent years, software development has made big strides. Tools like GitHub Copilot, ChatGPT, and other AI helpers have given developers the power to churn out code, tests, and documentation faster than ever. However, for solo founders and small startup teams, getting things written is only half the battle. Real challenges lie in getting it […]
Open Letter Calls for Fundamental Change to Open Source Economics
Leading stewards of several major open source projects today issued a joint open letter calling for major changes to be made to the way the IT infrastructure used to support these initiatives is funded, operated and maintained. Posted on the Open Source Security Foundation (OpenSSF) website, the open letter signed by representatives from open source […]
Morgan Stanley Open Sources CALM: The Architecture as Code Solution Transforming Enterprise DevOps
Enterprise software development has long been plagued by a fundamental disconnect: the gap between architectural intent and actual implementation. Static diagrams gather dust while code evolves, compliance reviews create month-long bottlenecks, and architectural decisions become lost knowledge scattered across documentation that nobody reads. Morgan Stanley felt this pain acutely until they decided to solve it […]
VS Code’s Open Source AI Revolution: A New Chapter for Developers
VS Code open-sources GitHub Copilot Chat extension under the MIT license, democratizing AI-powered coding with transparency and collaboration.
Lineaje Leverages AI Agents to Secure Open Source Packages and Images
Lineaje has added artificial intelligence (AI) agents that leverage multiple types of code scanners to ensure the open-source software packages and artifacts being used by application developers are truly secure.
Report: Commercial Software Just as Vulnerable as Open Source
An analysis published by ReversingLabs, a provider of tools for securing application development environments, suggests that commercial software used in software supply chains is just as vulnerable as open-source code.
Open Source: Pros and Cons to Consider Before Taking the Plunge
You can move from closed source to open source, or from a more restrictive license to a more open license, whenever you like, and you will receive nothing but applause from the tech community.
Semaphore Goes Open Source: A New Dawn for DevOps Professionals
Semaphore’s CI/CD platform goes open source under Apache 2.0, offering DevOps professionals a scalable solution without vendor lock-in. Explore how this changes the game.
Consortium Driving OpenStack to Become Arm of The Linux Foundation
The Open Infrastructure Foundation (OpenInfra), which oversees the development of the open source OpenStack cloud computing framework, this week agreed to become an arm of The Linux Foundation as part of an effort to foster more collaboration with maintainers of projects such as Kubernetes and the Linux operating system.
Black Duck Analysis Surfaces Raft of Open Source Software Vulnerabilities in Code Bases
An analysis of 965 commercial codebases across 16 industries conducted in 2024 finds 86% of commercial codebases evaluated contained open-source software vulnerabilities, with 81% of them known to be high- or critical risks.
Open Source Software Security Concerns with Spike Curtis
Spike Curtis, principal engineer for Coder Technologies, dives into why open source software security concerns are valid, and why the only viable option is to invest more in securing software supply chains to mitigate potential threats. While open source benefits from community oversight, organizations must vet the projects they rely on to avoid security gaps. […]
Life After Death, HeroDevs Acquires Xeol To Remediate Unsupported Software Zombies
Xeol tracks end-of-life data in 100,000+ open-source software packages to help identify and remediate unsupported software in one streamlined workflow.
Endor Labs Forks Semgrep to Opengrep for Static Code Analysis
Software application development lifecycle (SDLC) analysis company Endor Labs has worked with a cadre of industry partners to now launch Opengrep, a toolset designed to ensure static software application code analysis remains open and accessible.
Software Dev Culture Shock: “I Have to Do WHAT Now!?”
Software bills of materials (SBOMs) have sparked a real culture shock in developer teams that are being made to account for – and be scrutinized over – the minute decisions they make in the development of software.
Best of 2024: Valkey is Rapidly Overtaking Redis
Redis is taking it in the chops, as both maintainers and customers move to the Valkey Redis fork.
Perforce Forks Puppet, Community Considers Muppet
DevOps platform company Perforce is forking Puppet, the open-source configuration management technology it acquired in May 2022.
Report Shines Spotlight on Open Source Software Security Challenges
An analysis of more than five million open-source software packages published by Lineaje, a provider of a platform for tracking open-source software components, finds 95% of security issues involve some type of open-source software package dependency, with more than half (51%) of the vulnerabilities discovered having no known existing fix available.
Code Busters: Are Ghost Engineers Haunting DevOps Productivity?
A study coming out of Stanford University conducted by software engineering productivity specialist Yegor Denisov-Blanch claims that developer teams are rife with so-called ghost engineers who do virtually no work.
Sonatype Report Surfaces Software Supply Chain Security Challenges
Sonatype today during a virtual All-Day DevOps (ADD) event shared the results of a report that finds there has been a 156% increase in the number of malicious open source packages year-over-year, reaching more than 512,847 for a 156% increase in the past year.
Survey Finds Compensation Drives Better Open Source Software Security Behavior
A survey of 400 maintainers of open-source software projects suggests IT organizations should be paying a lot more attention to the degree to which the stewards of these projects are compensated before downloading software components.