Where the world meets DevOps. Powered by @TechstrongGroup.
Joined February 2011
- Tweets64.4K
- Following1.5K
- Followers58.4K
- Likes10.3K
GemDB has added a Visual Studio Code extension that lets developers and AI agents use Python code to generate schemas for its object database, so objects persist exactly as they exist in application code and any change to the code changes the schema without mapping, migration or a DBA.
Adding a field to an object now replaces what used to require join tables, foreign key definitions and backfill scripts, which matters as the pace of application development accelerates.
Read the full article on what GemDB Code includes and where it fits in DevOps workflows: buff.ly/p67yvoB
#Databases #DevOps #AIAgents #DeveloperTools
GitHub has launched a package firewall in public preview, targeting the problem that has hit npm users repeatedly this year: malware that steals credentials as soon as a package is installed.
Attackers have been doing their best work during install time, with the Axios compromise in March dropping a remote access trojan through a postinstall script, and GitHub's answer sits in the request path between runners, coding agents and workstations on one side and upstream registries on the other, with a one-day cooldown that Datadog Security Labs argues would have stopped Axios in its tracks.
Read the full article on the five controls and what the firewall can't catch: buff.ly/fVxliI0
#GitHub #DevSecOps #SupplyChainSecurity #npm #AppSec
Tomorrow at 1 PM ET: Is technical debt holding your AI strategy back?
Join @AWS to explore how continuous modernization can reduce maintenance costs, improve code visibility and prepare legacy applications for AI agents.
Register: buff.ly/3Xv2Pni
#AWS #CloudModernization
DevOps.com retweeted
Telemetry can be in every service and still leave platform teams blind. Coverage without the ability to analyze it and get insights just increases cost.
Measure whether your most junior engineer feels confident debugging in production: platformengineering.com/feat…
#Observability
DevOps.com retweeted
AI agents that wow in a demo often can't repeat the same task, and that gap keeps prototypes out of production. Mike Vizard (Techstrong Group) with Adam Jacob (@adamhjk) on building agents you can rely on. techstrong.tv/videos/intervi… #AIAgents #DevOps
DevOps.com retweeted
AI agents can now take compiled software apart and explain how it works. Great for legacy modernization. Less great if your client code holds secrets. My latest for @devopsdotcom:
devops-hd5ff.sevalla.app/ai-… #DevOps #AppSec
🚨 Last call for DevOps Dozen 2026 nominations.
Nominations close today at 5 PM ET.
With 24 categories across Community and Tools & Services, this is the final opportunity to recognize the people, projects and solutions making an impact on software delivery.
🏆 9 Community Awards
🏆 15 Tools & Services Awards
Submit your nomination before the deadline:
👉 devopsdozen.com
#DevOps #DevOpsDozen2026 #DevOpsAwards
Fast releases, weekend firefighting, engineer burnout? Deployment frequency can hide broken delivery processes.
Join Eric Minick of Harness Oct. 28 at 1 PM ET to explore how automation can reduce manual bottlenecks.
Register: buff.ly/6Ya5MuN
#DevOps #CICD #AIOps
DevOps.com retweeted
Broadcom is adding HyperArmor to VMware ESX, introducing real-time threat blocking, script allowlisting and SSH multi-factor authentication to protect hypervisors from emerging attacks.
Read more: buff.ly/0ZfuuOl
#Broadcom #VMware #Cybersecurity #Virtualization #InfrastructureSecurity
DevOps.com retweeted
"Don't ask what AI can do. Start with asking what you want AI to fix first." @ManageEngine's Rakesh Jayaprakash tells Mike Vizard where AI in IT operations should start.
▶ Watch the full interview: techstrong.tv/videos/intervi…
#ITOperations #AIAgents
DevOps.com retweeted
Developers are going from working with one coding agent to leading teams of them, but the tools around those agents still assume one session, one task, one person watching. Each agent works in isolation. So the developer becomes the coordination layer: carrying context between sessions, deciding who picks up what, noticing late that two agents touched the same code.
We launched @band_hq for Developers to move that coordination to the agents. They communicate, divide the work and hand off to each other directly. The developer sees ownership, blockers and escalated questions as they appear, and steps in while it's still cheap to change course.
Thank you to Mike Vizard and @devopsdotcom for covering the launch.
devops.com/band-desktop-appl…
Reverse engineering used to take a specialist, a disassembler and a lot of patience, and AI agents can now inspect compiled software, explain how it works and write a working version with no source code required.
OpenAI's own system card puts GPT-6 Astra at 99.2% on SRE-Bench binary reverse engineering within four attempts, and with tools like the open-source REA server connecting agents to Hopper, Ghidra and IDA, if your team can analyze someone else's app, someone else can analyze yours.
Read the full article on why security through obscurity is close to useless and what DevOps teams should do about it: buff.ly/rX0nHns
#Cybersecurity #DevOps #ReverseEngineering #AIAgents
Microsoft's September roundup of Foundry updates is less about making agents smarter than about making them easier to schedule, cheaper to run and easier to troubleshoot, with Routines and Tool Search now generally available and Insights analyzing production traces in public preview.
Tool Search cut input-token use by more than 60% for a 50-tool toolbox in Microsoft's internal evaluation, and Insights groups recurring behavior into findings with evidence and a proposed next step, though teams still have to route those findings through their own release gates.
Read the full article on what changed and what to check before upgrading: buff.ly/GzcVwp1
#Microsoft #AIAgents #MicrosoftFoundry #DevOps
GitHub has made AI Scan for pull requests generally available, filling in coverage where CodeQL doesn't reach, including PHP, Shell, Terraform configuration, Dockerfiles and Blazor, all files that define how software gets built and deployed.
AI Scan findings are advisory and won't block merges, and they don't run on fork-based or Dependabot pull requests, which puts the burden on teams to assign an owner and act on what it finds.
Read the full article on what changed since preview and how to roll it out: buff.ly/TDt4FF2
#GitHub #DevSecOps #AppSec #CodeQL #AISecurity
Cohere plans to acquire AI cybersecurity startup Aisle and launch Cohere Cyber, adding AI-powered vulnerability detection, automated code security and developer tools to its enterprise offerings.
Read more: buff.ly/NXnhyde
#Cohere #Cybersecurity #ArtificialIntelligence #DevSecOps #SoftwareSecurity
Open source security company Chainguard has released Workspaces, a service designed to give agents a safe space to do their thing without disrupting the security of existing operations, running them in hardware-isolated ephemeral microVMs built from zero-CVE Chainguard OS packages and FIPS-compliant toolchains.
Credentials stay out of the workspace entirely, replaced by encrypted short-lived tokens, which addresses the bind administrators face today where an agent inherits its creator's full permissions or the user drowns in prompt fatigue approving each request.
Read the full article on how Workspaces handles isolation and what it is up against: buff.ly/CdVlaWL
#Cybersecurity #AIAgents #Chainguard #AppSec
Reliability and platform work fill most of this week's DevOps listings, with four site reliability roles and a Kubernetes engineer opening at IMC Trading, while Asana's developer productivity posting tops the range at $336,750. Three roles are fully remote and the Bay Area claims two.
Browse the roles and where they're based: buff.ly/iw5RFdM
#DevOps #Jobs #TechJobs #Hiring #Careers
OpenCode is warning users of its Console management hub that third-party API keys from OpenAI, Anthropic and Google saved in some workspaces may have been exposed in a large-scale distillation attack, a technique Anthropic has been flagging since early this year, with affected developers urged to revoke and replace keys and some already reporting unexpected charges on their bills.
The breach lands as the joint NSA-CISA-FBI advisory formally reframes industrial-scale model distillation from commercial dispute into national security concern.
Get the full account of what happened and how the threat is being reclassified: buff.ly/yivYSp3
#Cybersecurity #OpenCode #AISecurity #InfoSec
Dean Hall has released Brutal, a C# framework for building games or game engines that his companies Ahwoo and RocketWerkz made public on October 15, free for commercial use with no royalties.
His argument is that studios have handed too much control to engine vendors, and the project's GitHub page sums it up in one line: you are only as independent as your tools are.
Read the full article on what Brutal includes and the lock-in trade-off it leaves studios to weigh: buff.ly/2Hj5RgI
#GameDev #OpenSource #Unity #Unreal #DevOps
DevOps.com retweeted
When a developer platform fails and infrastructure, DevOps and SRE teams each own part of the system, developers wait while teams debate who should respond and who has authority to coordinate recovery.
Read more here: zpr.io/M5hbZeGg8QtD
#PlatformEngineering
