Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Continuous Integration and Development, and related technologies.

jfrog

Introducing JFrog Preview: Getting New Capabilities Into Your Hands, Faster

Aug 28, 2026 By Shai Ben-Tovim In JFrog
TLDR: “Preview” isn’t a lightweight version of GA, and it isn’t a beta with a new name on it. It just changes the timing and access. You’ll see new JFrog capabilities the day they’re ready for real use, not the day they’re ready for a press release. We’re starting at swampUP 2026. As we know, AI has changed the speed of software development and delivery. Work that used to take three months now takes weeks.
Read Post

Your SBOM is already out of date

Aug 27, 2026 By Cloudsmith In Cloudsmith
MIT and Apache 2.0 are the easy licenses. Generally, they let you do what you want. Copyleft licenses are the ones that come back to ask questions later, especially once you're generating revenue off the component. This video covers why license compliance gets challenging, and what actually keeps it under control: The goal isn't avoiding open source. It's knowing what's actually in there before a license or a vulnerability surprises you.
View Video

The Cyber Resilience Act isn't just for hardware

Aug 27, 2026 By Cloudsmith In Cloudsmith
There's a common assumption that the EU Cyber Resilience Act is a hardware and IoT manufacturer concern. Actually, it affects any SaaS company selling into the EU too, and that's a gap in awareness worth closing. This video covers what the CRA is actually there to do and what it means for your own software supply chain: Securing your customers' supply chain starts with being able to account for your own.
View Video
Integrating Virtual Identity Systems into Modern DevOps and CI/CD Workflows

Integrating Virtual Identity Systems into Modern DevOps and CI/CD Workflows

Aug 27, 2026 By OpsMatters In OpsMatters
Modern IT service management and cloud operations rely heavily on automated identity validation, multi-factor authentication (MFA) testing, and isolated staging environments. Deploying cloud infrastructure at scale requires continuous verification without linking critical operational workflows to physical mobile hardware. DevOps engineers building automated alert pipelines or synthetic monitoring suites often implement a dedicated virtual number to receive SMS payloads, isolate production keys, and validate two-factor authentication endpoints programmatically.
Read Post
circleci

CircleCI Smarter Testing: Stop running tests that don't matter

Aug 26, 2026 By Nathan Fish In CircleCI
Testing consumes up to 50% of CI/CD pipeline time. That’s the single most expensive place in your delivery pipeline, and a meaningful share of that time is often wasted running tests unaffected by the change. Every time a developer pushes a commit, the full test suite runs. A two-line bug fix in auth.py triggers 2,000 tests, including 1,900 that don’t touch anything near auth.py. Those unrelated tests are overwhelmingly likely to pass, but the pipeline still spends 20 minutes running them.
Read Post

How to Route Package Traffic Through JFrog PTC With Zscaler: Setup and Policy Configuration

Aug 26, 2026 By JFrog In JFrog
JFrog’s Package Traffic Controller (PTC) intercepts an organization’s public package traffic at the network layer and routes it through JFrog, so JFrog Curation policies and audit logging apply to every intercepted install without changing how developers work.
View Video

You can't audit an AI model the way you audit a binary

Aug 25, 2026 By Cloudsmith In Cloudsmith
Open up an AI model and what's actually inside is a floating array of decimal points. No one can look at that and confirm it hasn't been tampered with, doesn't contain bias, or wasn't trained on poisoned data. This video covers why that changes how you need to think about trusting a model: If you can't unpick the model itself, you have to be able to trust its origin.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.