Most Read
Most read news & articles within last 7 days
GitHub and PyPI Bet On Time to Slow Down Software Supply Chain Attacks
Tom Smith | | automated updates, CI/CD security, dependency cooldown, dependency pinning, dependency updates, devops security, GitHub Dependabot, lockfiles, malicious packages, open source security, package poisoning, package registry security, platform engineering, PyPi, Python Package Index, scoped access tokens, Software Supply Chain Security, supply chain attacksGitHub and PyPI are using time as a security control, delaying dependency updates and locking older releases against new file uploads ...
GitHub Gives Teams More Control Over Copilot’s Cloud Agent in Linear
Tom Smith | | agent guidance, agentic coding, AI coding agent, AI development workflow, automated pull requests, branch controls, Copilot cloud agent, custom coding agents, devops automation, engineering productivity, GitHub Actions, GitHub Copilot, GitHub Marketplace, Linear integration, Linear issues, mid-session steering, model selection, software development agentsGitHub’s Copilot cloud agent integration with Linear is now generally available, adding model, branch and team-level controls for delegated coding work ...
Investments in DevOps Tools and Platforms Start to Accelerate in AI Era
A global survey of 839 IT decision-makers conducted by the Futurum Group finds 54% now work for organizations that use AI across more than half of their software development lifecycle (SDLC), with ...
CodePen 2.0 Turns a Design Playground Into a Real Deployment Tool
Tom Smith | | browser coding, browser-based IDE, Cloud development environment, Cloud IDE, CodePen, CodePen 2.0, CodePen Projects, custom domains, developer tools, devops, file-based projects, front-end development, one-click deployment, production deployment, real-time collaboration, shadow infrastructure, version history, web developmentCodePen 2.0 transforms the front-end playground into a file-based development platform with collaboration, version history and one-click deployment ...
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
Tricentis Acquires Tabnine to Gain Knowledge Graph for AI Testing Agents
Tricentis today revealed it is acquiring Tabnine to gain access to a knowledge graph that will be used to provide context to AI agents that have been trained to automate a range ...
The Innovation Puzzle 2.0: Connecting Vision and Value
Suneetha Uppalapati | | AI Governance, AI strategy, developer productivity, digital transformation, enterprise architecture, enterprise innovationThe tech landscape constantly evolves, making it tempting to chase every new trend. Ironically, in today's business world, the word "innovation" has become almost synonymous with technology adoption. Yet after years of ...
CISA’s 2026 SBOM Guidance Adds Hash Requirements and AI Coverage
Tom Smith | | AI supply chain security, CISA, CISA SBOM 2026, CMMC, component hashes, component licensing, continuous SBOM validation, CycloneDX, FBI, FedRAMP, NSA, open source security, SaaS security, SBOM automation, SBOM minimum elements, software bill of materials, software procurement, Software Supply Chain Security, software transparency, SPDX, vendor risk managementCISA’s updated 2026 SBOM minimum elements expand software transparency requirements to AI, SaaS and open source while adding hashes, licenses and stronger validation ...
OpenAI Open Sources Codex Security CLI for the Merge Path
OpenAI has released its Codex Security command-line interface and software development kit as open source software under the Apache 2.0 license, providing a new way to bring its AI security scanner into ...
DevOps Is Drowning in Updates—and Engineering Is Paying the Price
Alex Vakulov | | cloud operations, devops, devsecops, information overload, platform engineering, site reliability engineeringDevOps used to be a manageable rhythm: several core tools, a handful of respected blogs, and a few incident write-ups that made everyone slightly uncomfortable in a useful way. Now it feels ...
