Features
Sonar Unfurls Framework for Managing DevOps Workflows in the Age of AI
Sonar this week launched an Agent Centric Development Cycle (AC/DC) framework that promises to modernize continuous integration (CI) in the age of artificial intelligence (AI) coding. Announced at an online Sonar Summit, ...
Chainguard Expands Repository to Add More Secure Open Source Libraries
Mike Vizard | | AI agents, application security, dependency layer, devops best practices, DevSecOps practices, Open Source Security Foundation, open source vulnerabilities, secure open source libraries, secure repositories, SLSA framework, software artifacts, software builds, Software Supply Chain SecurityLearn how Chainguard is strengthening software supply chains by expanding its secure repository of Java, JavaScript, and Python libraries, enabling DevOps teams to access components compliant with SLSA framework standards ...
N. Korean Famous Chollima Hackers Use Malicious npm Packages to Steal Data
Jeff Burt | | Contagious Interview, Famous Chollima, infostealer, linux, macOS, malicious npm packages, Microsoft Windows, Pastebin, remote access trojan (RAT), Socket, software developers, typosquattingA group of more than two dozen malicious npm packages used to steal secrets and credentials from software developers has all the hallmarks – from infrastructure to operations – of Famous Chollima, ...
Eclipse Foundation Extends Scope and Reach of Open VSX Registry
Mike Vizard | | AI coding tools, application development, AWS, developer tools, digital sovereignty, encryption, exposed credentials, extension name spoofing, funding model, malicious pattern detection, multi-region architecture, namespace impersonation, rate limiting, security infrastructure, software security, Software Supply Chain, trusted environments.The Eclipse Foundation launches a new framework for the Open VSX Registry, enhancing security features and transitioning to a hybrid architecture. With support from AI tool provider Cursor, this initiative aims to ...
Microsoft Executives Warn AI Could Limit the Developer Talent Pipeline
Generative AI is transforming software development at remarkable speed. But in a new paper written by two Microsoft executives, Azure CTO Mark Russinovich and Scott Hanselman, VP of the developer community, argue ...
ControlMonkey Extends IaC Automation Reach to Restore Network Services
ControlMonkey has extended its platform for automating infrastructure-as-code (IaC) to add an ability to reprovision network services following a disruption in service. Company CEO Aharon Twizer said this extension to the Cloud ...
Postman Adds Ability to Invoke API Code From Within Git Workflows
Mike Vizard | | AI agents, AI integration, API catalog, API management, API specifications, automation, code visibility, developer productivity, developer tools, Git repositories, IT environment, rogue APIs, software engineering, State of the API Report, workflow efficiencyDiscover how Postman’s new feature allows software engineering teams to manage API specifications, collections, and environments directly from Git repositories, simplifying workflows for AI agents in the development process ...
Google ADK Opens the Door to AI Agents That Work Inside Your DevOps Toolchain
Tom Smith | | Agile workflows, AI agents, AI-Driven Development, AI/ML ecosystem, CI/CD, code management, database queries, devops, engineering workflows, GitHub integration, Google ADK, MPL-based integrations, observability, observability-native frameworks, Pinecone, project management tools, software development, system performance, telemetery, third-party integrations, workflow automationGoogle ADK adds integrations for GitHub, GitLab, Jira, MongoDB, and seven observability tools. AI agents can now work inside your DevOps toolchain ...
Five Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part of an effort to better serve our audience. Our goal in these ...
AI-Fueled Development Pushes Open-Source Risk to Extremes: Report
Artificial intelligence has shortened the timeline for software development from months to days. But according to new research, that acceleration is creating significant risks for security and compliance issues. Black Duck’s 2026 ...
Harness Readies Resilience Testing Platform to Make Applications More Robust
Harness today revealed that it will make available a set of open source tools for testing the resiliency of applications that are based on a chaos engineering platform the company gained with ...
Malicious NPM Package Gets Downloaded 50K Times Before Discovery
A malicious package downloaded approximately 50,000 times from a node package manager (npm) is providing an object lesson for adopting more DevSecOps best practices. Security researchers from Tenable discovered a “ambar-src” package ...
