DevOps

DevGuard: Open-source vulnerability management for the software supply chain

cybersecurity, DevOps, Don't miss, GitHub, Hot stuff, News, open source, software, supply chain, vulnerability management /

DevGuard: Open-source vulnerability management for the software supply chain 2026-10-21 at 10:02 By Anamarija Pogorelec DevGuard is a free, open source vulnerability management platform that collects a software project’s security findings in one place, ranks them by risk, and tracks them. It’s an OWASP Incubating Project, and anyone can self-host it. One command line, six […]

DevGuard: Open-source vulnerability management for the software supply chain Read More »

AI-generated changes create review bottlenecks in software delivery

agentic AI, AI, code, cybersecurity, DevOps, JetBrains, News, report, software development /

AI-generated changes create review bottlenecks in software delivery 2026-10-15 at 07:30 By Anamarija Pogorelec 83.4% of respondents who use DevOps practices run CI/CD pipelines, making them the most widely adopted practice in that group, according to JetBrains’ The State of CI/CD in 2026 report. Adoption exceeds that of containerisation and orchestration, infrastructure as code, GitOps […]

AI-generated changes create review bottlenecks in software delivery Read More »

Keyorix: Open-source secrets management for teams that can’t use SaaS

cybersecurity, data management, DevOps, DevSecOps, Don't miss, GitHub, Hot stuff, News, open source, software /

Keyorix: Open-source secrets management for teams that can’t use SaaS 2026-10-05 at 08:00 By Anamarija Pogorelec Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of […]

Keyorix: Open-source secrets management for teams that can’t use SaaS Read More »

AWS’s new sign-up gives accounts spend caps, email invites, and agent-set permissions

AWS, cloud computing, DevOps, News /

AWS’s new sign-up gives accounts spend caps, email invites, and agent-set permissions 2026-09-17 at 07:51 By Sinisa Markovic New AWS customers can now sign up with a Google, GitHub, or Apple login, start with $100 in Free Tier credits, and build inside a “project” where AWS and coding agents set up permissions automatically. Paid projects […]

AWS’s new sign-up gives accounts spend caps, email invites, and agent-set permissions Read More »

AWS spent years rebuilding its routing control plane without taking the network down

AWS, cloud computing, DevOps, networking, News /

AWS spent years rebuilding its routing control plane without taking the network down 2026-09-09 at 07:52 By Anamarija Pogorelec Every AWS API call, CloudFront video stream, and Route 53 lookup crosses the same infrastructure, which AWS calls its border network. It now runs on a routing system rebuilt from scratch over several years. The system […]

AWS spent years rebuilding its routing control plane without taking the network down Read More »

Open-source maintainers still work underfunded as sponsorship crosses $100 million

DevOps, GitHub, News, open source /

Open-source maintainers still work underfunded as sponsorship crosses $100 million 2026-07-21 at 11:37 By Anamarija Pogorelec A maintainer patches a library late at night that ships inside thousands of products, and no invoice follows. Sebastián Ramírez and Caleb Porzio spent years in that position. Ramírez, known as tiangolo, builds tools that other Python projects depend […]

Open-source maintainers still work underfunded as sponsorship crosses $100 million Read More »

What public money does to open-source projects

code, cybersecurity, DevOps, Don't miss, News, open source, research /

What public money does to open-source projects 2026-07-16 at 08:30 By Mirko Zorz Most of the software running inside a typical company was written by volunteers the company never paid. Open-source code sits under web apps, build pipelines, and the machine learning stacks getting so much attention right now. Roughly 96 percent of codebases carry […]

What public money does to open-source projects Read More »

Vulnerability reports are arriving faster than GitHub can review them

CVE, DevOps, Don't miss, GitHub, News, vulnerability assessment, vulnerability management /

Vulnerability reports are arriving faster than GitHub can review them 2026-06-30 at 08:25 By Anamarija Pogorelec Across the open source world, people are reporting software flaws in record numbers, and the systems built to verify those reports are straining under the weight. The GitHub Advisory Database, which feeds automated security alerts to millions of projects, […]

Vulnerability reports are arriving faster than GitHub can review them Read More »

Senior engineers are spending their week cleaning up AI-generated code

AI, code, code analysis, DevOps, Don't miss, generative AI, Hot stuff, LLMs, New Relic, News, report /

Senior engineers are spending their week cleaning up AI-generated code 2026-06-15 at 07:00 By Anamarija Pogorelec At most U.S. technology companies, machines now write the bulk of the code that ships each week. The engineer’s job has shifted toward reviewing what the AI produces, and that review gives the code high marks. Leaders rate AI-generated […]

Senior engineers are spending their week cleaning up AI-generated code Read More »

7 hard truths security pros should know: 2026 DevOps Threats Report

authentication, Cloud, DevOps, DevSecOps, Don't miss, Expert analysis, Expert corner, GitProtect.io, News, threats /

7 hard truths security pros should know: 2026 DevOps Threats Report 2026-05-20 at 09:34 By Help Net Security In 2025, trusted Git hosting platforms became a playground for cyber criminals. This is the main conclusion from the latest “DevOps Threat Unwrapped Report 2026” by GitProtect. If you want to effectively counter attacks targeted at your […]

7 hard truths security pros should know: 2026 DevOps Threats Report Read More »

Attackers accessed, downloaded code from Grafana Labs’ GitHub

data theft, DevOps, Don't miss, extortion, Grafana, Hot stuff, News, open source /

Attackers accessed, downloaded code from Grafana Labs’ GitHub 2026-05-18 at 12:57 By Zeljka Zorz A threat actor has managed to access Grafana Labs’ GitHub environment and download the company’s codebase, the open-source observability and data visualization firm announced on Sunday. The breach is significant given Grafana Labs’ widespread use across enterprise engineering and DevOps teams […]

Attackers accessed, downloaded code from Grafana Labs’ GitHub Read More »

Where AI in CI/CD is working for engineering teams

AI, DevOps, JetBrains, News, software development, survey /

Where AI in CI/CD is working for engineering teams 2026-04-24 at 08:22 By Anamarija Pogorelec Developers have folded AI into daily coding work. Still, the same tools remain largely absent from the systems that validate and ship software. New research from JetBrains points to a widening gap between how engineers write code on their own […]

Where AI in CI/CD is working for engineering teams Read More »

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines

DevOps, Don't miss, GitHub, News, open source, software /

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines 2026-04-20 at 09:14 By Mirko Zorz Boost Security has released SmokedMeat, an open-source framework that runs attack chains against CI/CD infrastructure so engineering and security teams can see what an attacker would do in their specific environment. What the tool does SmokedMeat takes a flagged […]

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines Read More »

Intel puts its data center performance knowledge on GitHub

chip, data center, DevOps, GitHub, hardware, Intel, News, open source /

Intel puts its data center performance knowledge on GitHub 2026-03-31 at 15:43 By Anamarija Pogorelec Intel engineers have published a centralized repository of data center performance knowledge on GitHub, giving practitioners direct access to tuning guides, configuration recommendations, and optimization recipes that previously required hunting across forums and scattered documentation. The repository, called Optimization Zone, […]

Intel puts its data center performance knowledge on GitHub Read More »

Google changes Play Store policies after settling Epic Games dispute

Android, DevOps, Google, News /

Google changes Play Store policies after settling Epic Games dispute 2026-03-05 at 14:27 By Sinisa Markovic Google is making changes to the Play Store after settling its legal fight with Epic Games, focusing on three areas: more billing options, lower fees with new programs for developers, and a program for registered app stores. The rollout […]

Google changes Play Store policies after settling Epic Games dispute Read More »

Bytebase: Open-source database DevOps tool

DevOps, Don't miss, GitHub, News, software /

Bytebase: Open-source database DevOps tool 2026-01-19 at 09:19 By Sinisa Markovic Bytebase is a DevOps platform for managing database schema and data changes through a structured workflow. It provides a central place for teams to submit change requests, run reviews, and track executions across environments. The open-source edition is designed for organizations that want to […]

Bytebase: Open-source database DevOps tool Read More »

StackRox: Open-source Kubernetes security platform

containers, cybersecurity, DevOps, DevSecOps, Don't miss, Kubernetes, News, open source, security operations, software, StackRox /

StackRox: Open-source Kubernetes security platform 2026-01-08 at 08:31 By Anamarija Pogorelec Security teams spend a lot of time stitching together checks across container images, running workloads, and deployment pipelines. The work often happens under time pressure, with engineers trying to keep clusters stable while meeting internal policy requirements. The StackRox open source project sits in […]

StackRox: Open-source Kubernetes security platform Read More »

Prometheus: Open-source metrics and monitoring systems and services

Cloud Native Computing Foundation, cybersecurity, DevOps, Don't miss, GitHub, Hot stuff, monitoring, News, open source, security metrics, software /

Prometheus: Open-source metrics and monitoring systems and services 2025-12-15 at 08:43 By Anamarija Pogorelec Prometheus is an open-source monitoring and alerting system built for environments where services change often and failures can spread fast. For security teams and DevOps engineers, it has become a common way to track system behavior, spot early warning signs, and […]

Prometheus: Open-source metrics and monitoring systems and services Read More »

OpenFGA: The open-source engine redefining access control

access control, DevOps, Don't miss, GitHub, News, open source, software, Terraform /

OpenFGA: The open-source engine redefining access control 2025-10-22 at 15:13 By Sinisa Markovic OpenFGA is an open-source, high-performance, and flexible authorization engine inspired by Google’s Zanzibar system for relationship-based access control. It helps developers model and enforce fine-grained access control in their applications. At its core, OpenFGA enables teams to define who can do what […]

OpenFGA: The open-source engine redefining access control Read More »

Nodepass: Open-source TCP/UDP tunneling solution

cybersecurity, DevOps, Don't miss, GitHub, network monitoring, networking, News, open source, penetration testing, red team, software /

Nodepass: Open-source TCP/UDP tunneling solution 2025-10-20 at 13:18 By Sinisa Markovic When you think of network tunneling, “lightweight” and “enterprise-grade” rarely appear in the same sentence. NodePass, an open-source project, wants to change that. It’s a compact but powerful TCP/UDP tunneling solution built for DevOps teams and system administrators who need to manage complex network […]

Nodepass: Open-source TCP/UDP tunneling solution Read More »

Scroll to Top