Hackers hijacked 1,900 GitHub accounts. Then they went after 30,000 repos.
Hackers accessed roughly 1,900 GitHub accounts, then used them to slip credential-stealing workflows into more than 30,000 repositories. The malicio…
DevOps
⚑ Сообщить о проблемеПоследние новости DevOps от Tech News
Все темы
agents
ai
api
architecture
automation
aws
backend
beginners
cloud
database
devchallenge
devops
docker
javascript
kubernetes
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
Anthropic built its own git replacement for AI-scale coding. But you can’t have it.
This week, Anthropic revealed it built an in-house version control system to handle exploding code merges. It says Claude was both part Th…
66% of billion-dollar companies leave critical bugs unpatched — the part the AI bug-hunting hype leaves out
Chainguard has launched an AI-powered security harness that uses frontier models, including Anthropic’s restricted Claude Mythos 5.1, to find…
Agents have made CI the bottleneck. Faster pipelines are the wrong fix.
Three posts landed in September that I think engineering leaders should read together. Anthropic’s engineering team wrote that their continuou…
CloudBees just committed to an AI-first pivot. Here’s why it matters for enterprise DevOps teams
When new CloudBees CEO Mo Plassnig took the job earlier this year, his board of directors handed him a mandate The post CloudBees just committed to…
“Dormant deployments were quietly consuming storage”: Why Vercel tightened its free-tier rules
Vercel announced this week that teams on its free Hobby plan will now have older, unprotected deployments deleted immediately if The post “Dormant d…
Стратегии деплоя, которые не роняют прод
Безопасный деплой в прод: единый артефакт, канареечные выкладки, feature flags, контроль метрик, совместимые миграции данных и отрепетированный отка…
Stop AI code sprawl before it destroys your software design
While AI code generators help teams ship faster than ever, that speed brings a hidden killer: Comprehension Debt. As soon The post Stop AI code spra…
AI broke code review. Two experts disagree on what replaces it.
Ask two experienced engineers about how to handle the flood of AI-generated code in their review queues, and you’ll get The post AI broke code…
Обвязка важнее модели: три слоя, которые определяют результат
Почему код вокруг модели влияет на результат сильнее выбора модели: маршрутизация вычислений, автоматические проверки отказов и контроль границ инфо…
TeamCity 2026.2 вывел Pipelines из EAP и открыл CI ИИ-агентам через MCP
TeamCity 2026.2: YAML-пайплайны стали штатной функцией Cloud и On-Premises, агенты получили три MCP-инструмента, а AI Assistant принимает ключ Anthr…
TeamCity получил OIDC-плагин: облачные ключи в CI заменяют короткие JWT
JetBrains выпустила плагин, который делает TeamCity провайдером OIDC: сборки получают короткоживущие подписанные JWT вместо постоянных ключей AWS, G…
Shai-Hulud: Whoever controls your package registry controls your pipeline
On September 15, 2025, npm’s registry did something unprecedented: Packages began updating themselves.  No maintainer ran npm publish. No…
JetBrains told everyone to patch. It didn’t patch itself.
JetBrains is urging users of its Cadence cloud development service to rotate credentials and treat previous executions and their outputs The post Je…
The npm attack that turned provenance attestations into camouflage
⁠Security researchers this week disclosed an npm supply-chain attack affecting more than 400 packages, including projects connected to Keyv an…
Forget humans “in” the loop. Harness engineering puts humans “on” the loop.
AI has us quickly forgetting humans as the software delivery loop. Now, forget humans in the loop. For Thoughtworks’ distinguished The post Fo…
“Every few months, a new model made part of our roadmap unnecessary”: Why Mendral’s founders gave up their startup for Anthropic
Anthropic is bringing the team behind AI startup Mendral on board to strengthen Claude’s software engineering capabilities. As part of The pos…
85% say code review is the new bottleneck. Here’s what the AI coding narrative leaves out.
A merge is a contract. The moment a change lands on main, every other team in the organization starts building The post 85% say code review is the n…
Why traditional CI/CD fails for LLMs (and the release gates we built to fix it)
This article explains why traditional CI/CD gates are not enough for production AI systems. I share a practical release-gating approach The post Why…
Cordyceps flaw pattern is more proof CI/CD is part of the attack surface
On June 24, research from Novee Security was released, reporting a CI/CD weakness that could enable anyone with an unauthenticated The post Cordycep…
The call is coming from inside your pipeline: the anatomy of a Codecov attack
In January 2021, an attacker added a single line of code to a popular bash script. Tens of thousands of The post The call is coming from inside your…
“The harness is where the hard work is”: Harness bets on agents that enterprises can trust in production
The agentic platform Harness launched Autonomous Worker Agents on Tuesday, enabling enterprises to replace fixed scripts in their delivery…
AI teams now deploy 1,000 times a month. Your pipeline wasn’t built for that.
There’s mounting evidence that AI coding tools are delivering on their less outlandish promises. With adoption shifting from 76% in The post A…
GitLab 19.0 trades its string section for a full DevSecOps orchestra
There are orchestras… and then there are mere string, horn, or woodwind sections. As the self-styled intelligent orchestration platform for Th…
CI wasn’t built for coding agents. Here’s what comes next.
For years, integration tests have lived inside CI pipelines, triggered on push and answered ten, twenty, or thirty minutes later. The post CI wasn&#…
As agentic dev tools boom, workflow auditability becomes the constraint
Recently, I was working with a senior engineering leader at a large financial institution to review their DevSecOps platform engineering The post As…
Improving token efficiency in GitHub Agentic Workflows
Agentic workflows that run on every pull request can quietly accumulate large API bills. Here's how we instrumented our own production workflows, fo…
The agent code explosion is here. We need to rethink our pipelines, fast.
GitHub recently published an update on availability following a couple of rough incidents in April. The article opened with a The post The agent cod…
Безопасный вайбкодинг: от автопилота к пилоту
Как сделать вайбкодинг безопасным: почему AI-агенты в разработке требуют принципов авиационной безопасности, что такое вайблёрнинг и как сохранить к…
Передача кода на аутсорс: роадмап для техлида в 2026
Как техлиду передать код на аутсорс и не потерять контроль: транзитный период, CI/CD, доступы, архитектура и оффбординг команды. — Читать дальше « П…