DevOps.com

Where the world meets DevOps. Powered by @TechstrongGroup.

[DevOps.com @devopsdotcom]

OpenTofu 1.12.0 introduces a destroy=false lifecycle option that lets DevOps teams remove resources from state without triggering a destructive API call.

That small change removes a significant source of accidental infrastructure risk during configuration updates.

Read the full article to see what else the release brings to infrastructure‑as‑code teams: https://t.co/A3LYU5KfZm

#OpenTofu #DevOps

[DevOps.com @devopsdotcom]

GitHub is moving Copilot from an autocomplete tool to a dedicated desktop app where developers manage multiple AI agents working in parallel.

The app introduces isolated worktrees and Canvases, giving teams a way to see what agents are doing and verify their output before code lands in a pull request.

Read the full article to understand how agent‑native development is reshaping the developer workflow: https://t.co/n5cmRrqhRM

#GitHub #Copilot

[Steven J. Vaughan-Nichols @sjvn]

Can Chainguard Save Open-Source Software From Mythos? Can Anyone? https://t.co/l2uAityX2N via @devopsdotcom & @sjvn

IBM and Red Hat aren’t the only ones that mean to lock down #opensource code against #AI hacking tools. @chainguard_dev has some plans too.

[Techstrong TV @TechstrongTV]

Linus Pushes Back | Google Goes Agentic | Open AI Gets Bigger https://t.co/5oClbAXHun

[CMD+CTRL @cmdnctrl]

“Vibe-driven engineering” reflects a shift from code to intent.

Faster iteration—but with risks to clarity and control.

Read more from @devopsdotcom: https://t.co/ORCvLPdBry

#AI #DevOps

[DevOps.com @devopsdotcom]

A new survey of 2,500 IT professionals finds that more than two‑thirds of organizations have embedded AI into their software delivery workflows, yet 60% also admit regularly shipping untested code.

The gap between AI‑driven speed and quality control is widening just as code volumes are surging.

Read the full article to see what this disconnect means for risk, trust, and technical debt: https://t.co/DZkCiZJwoD

#AI #SDLC #DevOps

[DevOps.com @devopsdotcom]

What if your terminal could flag a failed command and let an AI agent explain it without ever opening a browser?

Microsoft just shipped an experimental fork of Windows Terminal that docks an agent pane, detects errors, and supports any ACP‑compatible agent.

See how this early release could change developers' and DevOps teams' daily workflows: https://t.co/YjIi8tOsC8

#Microsoft #AI

[DevOps.com @devopsdotcom]

Postman just shipped an AI agent that spins up a sandboxed environment to autonomously handle API tasks from pull requests, Slack, or a CLI.

It returns verified artifacts directly into the CI/CD pipeline, shifting the bottleneck from manual API work to governance and oversight.

Read about what this means for teams already managing sprawling microservices here:https://t.co/Ez3265DjaH

#Postman #API #AIAgent

[DevOps.com @devopsdotcom]

Researchers warn the Mini Shai-Hulud worm’s leaked source code is spawning new malware targeting software supply chains, CI/CD pipelines, and cloud environments.

Read the full article: https://t.co/kl6lpi4oA1

#DevSecOps #CICD

[DevOps.com @devopsdotcom]

AI is generating more code, but many teams aren't seeing more productivity.

This webinar examines where AI is delivering value in DevOps, where adoption is stalling, and the hidden costs impacting enterprise pipelines.

Register now: https://t.co/SEcHTtcsvD

[DevOps.com @devopsdotcom]

The open‑source disclosure system is absorbing only 6% of the vulnerabilities that AI models like Mythos are surfacing, a gap that traditional patching cannot close.

Chainguard is now assembling infrastructure to fork and maintain thousands of critical projects when maintainers fall behind, a fallback the company calls a “maintainer of last resort.”

Read the full article to explore the proposal and the three possible futures for open source under AI strain: https://t.co/iUhoJpy6Pr

#Chainguard #OpenSource #Mythos

[DevOps.com @devopsdotcom]

Non-human identities are becoming one of the largest enterprise attack surfaces.

This webinar explores why traditional IAM struggles with autonomous systems and how zero trust can improve control, visibility, and accountability.

Register now: https://t.co/aLPUiLOfrj

[Techstrong.IT @TechstrongIT]

Google, Amazon, Microsoft, and Meta are backing a new program that will invest up to $5 million in clean‑tech startups and let them pilot their solutions inside real data centers.

The Data Center Innovation Initiative is designed to break promising cooling, power, and materials technologies out of the pilot phase by connecting them directly with the world’s largest infrastructure operators.

Find out how hyperscaler collaboration aims to turn the AI buildout into a test bed for emerging climate tech: https://t.co/QAGal8u3cD

#DataCenters #CleanTech #AI

[Techstrong TV @TechstrongTV]

Mike Vizard talks with Alex Zenla, Founder & CTO at Edera, about hardened containers, secure runtimes and making stronger isolation easier to adopt.
Watch: https://t.co/OOgS4kVy1V
#DevOps #AI

[C Thomas (Tom) Smith @ctsmithiii]

AI-assisted coding speeds up development — but also introduces more opportunities for vulnerabilities to slip through. Claude Code Security aims to close that gap by catching issues while developers write code, not after. New at @DevOpsDotCom:
https://t.co/ILEE2pWh9P #DevSecOps

[DevOps.com @devopsdotcom]

This week’s DevOps Jobs report includes a Senior Site Reliability Engineer at Dice in California, a DevOps Engineer at T-Rex Solutions LLC in Annapolis, and a Staff Engineer at AudioEye remote.

See the full list for all ten roles here: https://t.co/wnEOGSsKer

#DevOpsJobs #SeniorSRE #TechCareers

[DevOps.com @devopsdotcom]

Microsoft just added 35+ MCP tools to VS Code that let developers find, ingest, and visualize geospatial data through natural‑language prompts.

The extension replaces custom scripts and API handshakes with a unified interface in the editor, dramatically lowering the barrier to entry for geospatial workflows.

Read the full article to see how this signals MCP’s shift into domain‑specific infrastructure: https://t.co/ol2Q7Gwj5i

#Microsoft #MCP

[DevOps.com @devopsdotcom]

xAI just opened Grok Build to any developer via API, dropping the subscription requirement and putting its fastest coding model behind a pay‑per‑token endpoint.

The move turns Grok Build from a subscriber tool into a callable primitive for agentic pipelines.

Read the full article to see how the API access changes where Grok Build fits in the stack: https://t.co/enhzOBvSXM

#xAI #GrokBuild #DevOps

[DevOps.com @devopsdotcom]

Security testing that waits until after code ships leaves a gap that attackers have learned to exploit.

Claude Code Security now analyzes code as it’s written, catching logic‑level flaws that pattern‑matching scanners push to a later stage.

Find out how reasoning‑based analysis is moving security to the point of origin: https://t.co/5YWHzEejVt

#Anthropic #ClaudeCode #DevSecOps

[DevOps.com @devopsdotcom]

When a single session fans out into hundreds of subagents, the hard problem moves from writing code to confirming it is correct.

Anthropic’s new orchestration layer forces independent verification, but teams that treat governance as an afterthought will accumulate verification debt faster than the tooling can pay it down.

Find out how dynamic workflows work and what limits teams need to plan for: https://t.co/mPIMTs5Wig

#ClaudeCode #Anthropic #DynamicWorkflows