January 2022 – Carlos Castro

The best way to protect our secrets is using a proper Vault for that, here we gonna see how we can integrate GitLab with Hashicorp Vault and retrieve secrets using JWT method. For testing purposes, I used the Hashicorp Vault managed solution, which means the enterprise version.The enterprise version has Continue Reading

The Four Knobs of AI Agent Reliability: A DevOps Perspective January 27, 2026

AI agents aren’t chatbots—they’re systems that act. This guide cuts through the hype to show how DevOps teams can configure, trust, and run AI agents reliably in production.

Codenotary’s Free SBOM Service Tackles the AI Software Supply Chain January 26, 2026

Just because AI is writing your code doesn’t mean you can stop worrying about software bills of materials. While the quality of AI coding remains open to debate, there’s no question that everyone and their dog is using it. That means, if you’re serious about using AI in production, you must track its code in […]

Five Great DevOps Job Opportunities January 26, 2026

This week, DevOps.com spotlights open roles at NVIDIA, Travelers, Tessera Labs, Sherwin-Williams, and ThinKom Solutions to help engineers advance their careers.

Futurum Group Survey Sees Increasing Investments in AI to Deliver Software January 23, 2026

A global survey of 628 enterprise IT leaders conducted by the Futurum Group finds that increasing investment in generative artificial intelligence (AI) (40%), followed closely by AI and machine learning (ML) technologies (39%) and applying AI to IT operations (37%), also known as AIOps, are expected to be the top three drivers for accelerating software […]

N. Korea Contagious Interview Campaign Turns to VS Code to Deliver Backdoor January 23, 2026

Jamf security researchers said state-sponsored espionage actors are using malicious VS Code projects to steal information.

Legit Security AI Tool Uses Threat Feed to Identify Risks to Software Supply Chain January 22, 2026

Legit Security this week added a threat feed that DevSecOps teams can use to instantly determine if a newly discovered vulnerability impacts their software supply chain. Built using the Legit VibeGuard tool, the threat feed added to the company’s application security posture management (ASPM) platform also enables DevSecOps teams to take advantage of “vibecoding” techniques […]

AI Is Forcing a Rethink of Software Testing and QA January 22, 2026

SmartBear vice president of AI and architecture Fitz Nowlan explains why maintaining software integrity in the age of artificial intelligence requires organizations to double down on testing and quality assurance. He discusses how AI-driven development increases risk and why stronger QA practices are essential for reliable software delivery. Nowlan argues that AI-driven development increases risk […]