a Futurum companyTag
37 articles
Blogs
From Replit’s database deletion to the Nx supply chain attack, AI agent failures expose a dangerous truth: The biggest risk isn’t intelligence, but unchecked authority.
Showing 1–24 of 37
Best Practices
“Simplicity means that the smallest solution that solves the entire problem is the best solution. It keeps the systems easy to understand and reduces complex component interactions…
AI
IBM is expanding its Terraform infrastructure-as-code platform and Bob AI coding assistant with new policy-as-code capabilities, automated vulnerability remediation and AI governan…
Blogs
Terraform compliance doesn’t have to mean complicated policy pipelines. By combining TFLint with OPA and Rego, developers can enforce infrastructure guardrails directly in their ed…
AI
GitHub’s AI Scan brings AI-powered vulnerability detection to pull requests involving languages, scripts and infrastructure files beyond CodeQL’s existing coverage. Paired with the…
Blogs
A federated query architecture can reduce data duplication and latency while creating a governed, auditable data layer that enterprise AI agents can safely access.
Blogs
HashiCorp’s new tfpolicy framework brings native policy-as-code governance to Terraform using HCL and lifecycle-aware infrastructure checks.
Blogs
Configuration drift is the gap between the infrastructure state declared in code and the state actually running in your environment. It occurs when resources are changed outside of…
CI/CD
Full-stack developers are taking on DevOps, using CI/CD, Docker and Terraform to own the software lifecycle from code to cloud.
Blogs
Stop firefighting cloud costs weeks after deployment. Learn how to “shift cost left” by integrating cost estimates and policy-as-code directly into your DevOps workflows using tool…
AI
Engineering teams spend nearly 15 hours a week on repetitive DevOps toils that drain productivity. This guide explains how to identify high-impact automation opportunities, apply t…
Blogs
Configuration drift, the divergence of deployed infrastructure from its source-defined configuration, has emerged as a critical vulnerability, particularly within the complex AWS e…
Blogs
It starts in the pull request, where infrastructure decisions are made and the next generation of intelligent tooling has the most impact.
Blogs
The move to using infrastructure-as-code (IaC) for automated, reliable cloud deployments is a necessity in modern cloud computing.
Best of 2024
Everyone knew HashiCorp was attempting to find a buyer. Few suspected it would be IBM.
Blogs
As HashiCorp quietly slips into its new existence under the parent umbrella of IBM after this year’s $6.4 billion acquisition, the company held (one last?) HashiConf in Boston this…
Blogs
IBM’s multi-billion dollar deal to buy HashiCorp has left the hybrid cloud industry guessing what the future holds in store for the most popular provider of tools for DevOps and in…
Blogs
These key points can help you effectively manage Terraform infrastructure at scale, ensuring your systems are resilient, scalable and compliant with organizational policies and ind…
Business of DevOps
A lead contributor to OpenTofu answers the (truly) frequently asked questions about the open source project.
Blogs
With built-in end-to-end encryption, OpenTofu is a natural DevSecOps fit.
DevOps and Open Technologies
Everyone knew HashiCorp was attempting to find a buyer. Few suspected it would be IBM.
Blogs
The legal battle between the faux-open-source HashiCorp and the open source OpenTofu heats up.
Blogs
Hashicorp is accusing the open source OpenTofu Project of swiping some of its BSL-licensed Terraform code. Enter the lawyers.
Blogs
A community that embraced open source Terraform software has called upon HashiCorp to reverse license changes that limit software usage.
