Every line of code is risk
AI makes it easy to write more code. The question is whether that's actually a good thing.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on Continuous Integration and Development, and related technologies.
What happens when AI has no guardrails?
Without constraints, feedback, and clear standards, AI can create complexity faster than teams can manage it.
Why Leadership Said No
The question isn't whether your proposal is good, it's whether it's more important than everything else competing for the same time, people, and budget. That's why the strongest proposals explain the impact, not just the work.
Can Codex Fix Its Own Failed Build?
Give Codex access to CI feedback and it can diagnose failures, make a fix, and keep iterating until the pipeline is green. Here's the CircleCI plugin in action.
Managing AI Agent Primitives Like Real Software Packages with APM and JFrog
AI agents are part of the modern development workflow. They write code, review pull requests, generate tests, call tools, interact with MCP servers, and help developers move faster. But behind every useful agent, there is something just as important as the model itself: the context that tells the agent how to behave. That context can include skills, prompts, instructions, hooks, commands, scripts, references, and MCP server definitions. In a small project, managing these primitives is pretty simple.
Cut AI Agent Validation Startup Time From 45 Seconds to 12
A fresh Chunk Sidecar took 45.6 seconds to start. With a snapshot, it only took 12.
Shai-Hulud style attacks need more than scanning
Pre-install scripts mean a malicious package can compromise a developer's laptop the moment it's pulled – no build, no deploy, no install required. That breaks the old model where scanning catches a bad package after the fact, when it's already too late. The fix is active policy enforcement at the point of pull, using signals like package age, signed provenance, and maintainer trust to filter out malicious packages before they ever land.
Upgrade Your AWS Deploy Orb to Get Deploy Markers
Upgrade to the latest version of your AWS deploy orb to get automatic registration of deploy markers. This will give you instant access to deployment timeline, auto-rollback, and version comparison when something breaks — for about five minutes of effort. It will also switch you to OIDC, so there are no long-lived keys to manage. It’s a single version bump. Here’s how.
Code Ownership in the Age of AI: Who's Responsible When Things Break?
AI wrote the code, but when something breaks, that's still on you. Code ownership matters more than ever.
Boost Is Now In Public Preview
Today, we’re excited to announce that Boost is moving out of beta and into public preview. After months of building, breaking, and rebuilding inside JFrog’s own R&D organization, Boost is ready for the world. If you are currently running into token limits, unpredictable costs, or runaway usage from AI agents, Boost was built for you. It has already helped our teams reduce token spend while maintaining performance.