Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
Many developers publish packages to NuGet.org via API keys. In recent years, API keys and Personal Access Tokens (PATs) have […]
Ten Great DevOps Job Opportunities
DevOps.com is now providing a weekly DevOps jobs report through which opportunities for DevOps professionals will be highlighted as part
Docker AI Governance: Audit Logs, Now Where Your Security Team Already Works
Now in Docker AI Governance: a single searchable record of every policy decision your agents trigger, streamed to the SIEM
Empty sandboxes break developer experience
I work on Docker Sandboxes, so I spend a lot of time talking about isolation, microVMs, disposable filesystems, blast radii,
Microsoft Confirms Copilot ‘Super App’ Is Coming This Year — and It’s About More Than Convenience
Microsoft is finally admitting what many IT teams already knew: It has too many Copilots. CEO Satya Nadella confirmed on
GitHub Brings Stacked Pull Requests Out of the Shadows
For years, stacked pull requests have been something of an open secret in software engineering. Teams at Meta and Google
JetBrains Open-Sources KotlinLLM, a Research Prototype for Runtime Code Generation
JetBrains has released KotlinLLM as open source, giving Kotlin/JVM developers a research prototype that lets applications generate their own logic
Open Source Code Just as Secure as Proprietary Software—If You Manage It Right, Says CISA
Open source can be just as safe as proprietary software, though government agencies (and private enterprises) should take additional measures
Why Log Monitoring Is the Missing Link in Most Incident Response Workflows
Modern engineering teams have invested heavily in observability. Dashboards are populated, alerts are configured, on-call rotations are set. Yet when
Docker OIDC connections for GitHub Actions available for Docker Orgs
Eliminate Stored Credentials in Your CI/CD Pipelines TL;DR: Docker now supports OpenID Connect (OIDC) for GitHub Actions. Your workflows can