Tag

security

470 articles

Latest in security

Blogs

Certificate Renewal Is a Deployment Workflow, Not a Cron Job

Certificate renewal is often treated as a scheduled task: run an ACME client, obtain a new certificate, and move on. In practice, that view is too narrow for production systems. A certificate is not useful because it exists on dis…

Aug 28, 20263 min

All security Articles

Showing 1–24 of 470

Jul29

OpenAI Open Sources Codex Security CLI for the Merge Path

OpenAI has released its Codex Security command-line interface and software development kit as open source software under the Apache 2.0 license, providing a new way to bring its AI…

3 min

Jun15

GitHub Removes PAT Requirement for Agentic Workflows

GitHub Agentic Workflows can now use GitHub Actions’ built-in GITHUB_TOKEN instead of a personal access token (PAT). That means developers no longer need to create, store, or rotat…

3 min

May22

Blogs

Designing an AI-Powered DevSecOps Guardrail Pipeline Using GitHub Actions

By embedding AI-powered guardrails directly into CI/CD pipelines, organizations can detect vulnerabilities earlier, enforce security policies automatically and accelerate secure so…

3 min

May22

Blogs

Modernizing DevOps Security With Intelligent KYC Enforcement Layers

This is where smart KYC enforcement layers fit in — not a compliance box, but an engineering control that is directly part of DevOps processes.

3 min

May21

How to Create an AI Acceptable Use Policy

When teams know which tools are acceptable and which data are off-limits, AI becomes a disciplined advantage rather than a quiet source of risk.

3 min

May18

Microsoft Copilot Studio Brings Computer-Using Agents to the Enterprise

For years, IT and DevOps teams have wrestled with the same stubborn problem: how do you automate workflows in systems that were never built for automation? Legacy apps, vendor port…

3 min

May08

Vercel’s deepsec Brings AI-Powered Security Scanning Into the Development Workflow

Security has long been the last item on the checklist. Code gets written, reviewed, merged—and then, somewhere down the line, a security team takes a look. That model worked when d…

3 min

Mar17

Harness Extends AI Security Reach Across Entire DevOps Workflow

Harness today added an ability to automatically secure code as it is being written by an artificial intelligence (AI) coding tool in addition to adding a module to its DevOps platf…

3 min

Feb02

Please Grow Up, Coder Launches AI Maturity Self-Assessment Tool

Coder introduces an AI maturity self-assessment service to help organizations evaluate their AI adoption in software development. As teams transition from ad hoc usage to structure…

3 min

Jan09

Contributed Content

Importance of Observability in the DevSecOps Pipeline: Enhancing Security, Compliance, and Collaboration

In today’s rapidly developing software world, security cannot be an afterthought. DevSecOps, the integration of security practices into every phase of DevOps, requires continuous m…

3 min

Dec31

Best of 2025

Best of 2025: The DevOps Bottleneck: Why IaC Orchestration is the Missing Piece

If you work in DevOps, you’ve heard it a thousand times: “Do more with less.” More automation, more security, more reliability—but with the same (or fewer) people. Meanwhile, your…

3 min

Dec25

Best of 2025

Best of 2025: Five Trends That Will Drive Software Development in 2025

In 2025, developers will broaden the scope of how they use AI with promising new applications for reducing technical debt and improving security.

3 min

Dec02

Blogs

AWS Transform Modernizes Any Codebase, App, API or Runtime

Platforms, paradigms, processes and processing itself all evolve. Because the information technology industry crosses from one chasm to another on an apparently endless loop of per…

3 min

Nov04

Your Next Secrets Leak is Hiding in AI Coding Tools

AI coding tools are accelerating secrets sprawl in Kubernetes workflows. Learn where leaks happen and how platform teams can contain the risk.

3 min

Oct28

Blogs

Securing the AI Era: How Development, Security, and Compliance Must Evolve

The Code Boom and Its Paradox We are witnessing an unprecedented shift in how software is built. With the rise of AI copilots, automated agents, and low-code platforms, code is bei…

3 min

Oct17

Blogs

Infrastructure as Code, Security Blind Spots, and the Messy Reality of DevOps

I’ve spent most of my career in infrastructure and reliability engineering, from years as an SRE at Google to leading teams at Facebook and now building Spacelift. Along the way, I…

3 min

Sep18

Blogs

Shai-Hulud Attacks Shake Software Supply Chain Security Confidence

Being the Dune groupie that I am, I couldn’t pass up the chance to comment on the “Shai-Hulud” NPM attacks. What a clever name for a worm attack. But as the saying goes, “the spice…

3 min

Aug13

Contributed Content

The Right Kind of AI for Infrastructure as Code

AI is everywhere in cloud security right now. Nearly every product claims to be “AI-powered,” and copilots and chatbots promise to help teams interpret issues faster. But for most…

3 min

Jun26

Secure Code Warrior Defines Security Rules for AI Coding

Secure Code Warrior has made available a set of security rules for application developers using artificial intelligence (AI) tools to generate code. Company CTO Matias Madou said t…

3 min

Jun26

Blogs

Why DevSecOps Isn’t a Thing Yet

One of the biggest obstacles to DevSecOps adoption is the cultural gap between development, security, and operations teams.

3 min

Jun11

JFrog Extends Alliance With NVIDIA to Secure AI Software Supply Chain

JFrog and NVIDIA today announced they have expanded the integrations between their software development platforms to now include the Enterprise AI Factory, a set of frameworks and…

3 min

May12

Blogs

How Benchmarking Can Help Software Development Teams Achieve CISA’s “Secure by Design”

In April 2023, the Cybersecurity and Infrastructure Security Agency (CISA) launched its Secure by Design initiative, directing technology companies to ‘prioritize the security of c…

3 min

Apr28

Blogs

Minimus Unfurls Service for Accessing Secure Software Artifacts

Minimus today at the 2025 RSA Conference launched a managed service through which it ensures application development teams are provided access to a secure set of minimal container…

3 min