a Futurum company
Tom Smith

Contributing Writer

Tom Smith

Tom Smith (C. Thomas Smith III) is a veteran digital analyst and content strategist who spent more than four years as a Research Analyst at DZone.com (part of Devada), where he conducted thousands of interviews with technology executives and authored roughly 1,500 articles that generated more than 10 million page views across topics including AI/ML, Agile, APIs, cloud computing, DevOps, IoT, Java, Kubernetes, microservices, and security. He holds an MBA in Marketing from Duke University's Fuqua School of Business and a B.A. in Political Science from Duke. Smith later worked as a content strategist and technical writer at Cognizant, including stints on Google's Bard (now Gemini) and Meta's AI Business Assistant (MAIBA) "seed" content teams, where he helped train and evaluate large language models. Over his career, he has interviewed more than 4,000 technology executives across AI, cloud, data, security, and storage sectors. He now writes independently through Insights From Analytics and is a contributing writer across multiple Techstrong Group properties, including devopsy.kinsta.cloud, Digital CxO, Cloud Native Now, PlatformEngineering.com, and Techstrong.ai, where he covers AI agents, enterprise AI infrastructure, and emerging developer tools.

24Articles shown
ContributorDevOps.com
Beats
BlogsaiCI/CDdevopsAIagentic AI

Latest from Tom

Blogs

GitLab Fixes CVSS 10 Flaw in CI/CD Regex Engine, Plus 23 Other Vulnerabilities

GitLab is telling every self-managed customer to upgrade now. On October 12, the company shipped versions 19.4.2, 19.3.5, and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE). The releases fix 24 security vulnerabilities. One has a CVSS score of 10.0, the highest rating possible. GitLab.com already runs the patched code. GitLab Dedicated customers […]

Oct 14, 2026 · 3 min

All articles by Tom Smith

Showing 1–24
Blogs

GitHub Narrows App Permissions to Pull Teams Off Classic PATs

GitHub is giving DevOps teams more ways to limit an automation job to only the access it needs. A batch of GitHub Apps updates released Oct. 13 adds narrower permissions, relaxes a long-standing install restriction for repository administrators, and makes it easier to move users to expiring tokens. GitHub says the goal is to help […]

3 min
Blogs

npm Puts a 48-Hour Clock on Unused Trusted Publishing Configurations

GitHub has added an expiration date to unused npm trusted publishing configurations. Any configuration that doesn’t complete a successful publish within 48 hours of creation now expires and can no longer authorize a release. It’s a small change. But it closes a gap that matters to anyone who publishes packages from a CI/CD pipeline. How […]

3 min
AI

Anthropic Builds Its Own Source Control After AI Agents Outgrow Git

Anthropic has moved its internal monorepo off Git and onto a version control system it built from scratch. The reason is simple. Its AI agents now write code faster than Git-based infrastructure can handle it. In a post on its engineering blog, the company said it averaged about 2,500 merged code changes a day in […]

3 min
Blogs

GitHub Ties Every Commit to the Account That Pushed It

GitHub has introduced push attribution in limited public preview for Enterprise customers, adding authenticated pusher identities to commits alongside author and committer information. A new repository rule can also block pushes when committer details don’t match the authenticated account, helping DevOps teams combat identity spoofing, improve audit trails and strengthen software supply chain security.

3 min
AI

IBM Moves Its Bob Coding Agent Inside the Firewall

Plenty of enterprises want AI coding agents. Fewer are willing to send their source code to someone else’s cloud to get them. That tension has slowed adoption at banks, insurers, government agencies and other organizations that build software under strict rules about where code and data can live. IBM is betting a self-hosted option will […]

3 min
Blogs

GitHub Puts Guardrails on Copilot’s Sandbox Inside JetBrains IDEs

JetBrains IDEs are where a lot of enterprise backend work happens — Java, Kotlin, Spring, big monorepos with a lot to break. So when an AI coding agent starts running shell commands inside that environment, the question isn’t whether it’s useful. It’s what happens if it touches the wrong file, the wrong network path, or […]

3 min
Blogs

Rust’s First Debugging Survey Shows Most Developers Skip the Debugger Entirely

Most Rust developers don’t use a debugger. That’s the headline finding from the Rust compiler team’s first dedicated debugging survey, and it’s worth sitting with for a second. Rust has spent years building a reputation as the language that catches your mistakes before you ship them. The compiler is famously strict. The type system is […]

3 min
Tom Smith | DevOps.com