Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Continuous Integration and Development, and related technologies.

The Atlassian Rovo MCP Server now supports Bitbucket Cloud

The Atlassian Rovo Model Context Protocol MCP Server now supports Bitbucket Cloud. AI clients like Claude, ChatGPT, Cursor, and VS Code can now browse repositories, create commits, open pull requests, and check pipeline results, all through the same secure MCP connection that already works with Jira and Confluence.

Enable self-service environments with Harness Internal Developer Portal

Learn how to enable self-service environments with an internal developer portal (IDP) and CI/CD automation. You’ve automated deployments with Harness CD, but what about the environments those deployments run on? In this quick demo, see how Harness Environment Management completes the picture by making environments self-service, standardized, and fully lifecycle-managed. Together, CD + Environment Management close the loop on modern software delivery.

From Datadog to CI Tests: Catch Regressions Before Deploy

I worked in observability for years, and the same pattern showed up across teams. An alert fired, the on-call rotation scrambled, and everyone did what they had to do to stabilize production. Then came the retrospective. Once the immediate pressure was gone, the conversation shifted to one question: how do we make sure this never happens again? My friend Jade Rubick coined a name for that principle: DRI, “don’t repeat the incident”.

Ansible vs Terraform Explained: Key Differences for Modern Infrastructure Automation | Harness Blog

If DevOps teams mix up the roles of Ansible and Terraform, deployment pipelines can become unreliable. Manual handoffs slow down changes, and audits may find gaps where responsibilities overlap. Each tool solves different problems, so using them correctly avoids delays and compliance risks. Are you dealing with scattered provisioning and configuration workflows?

npm axios attack - What happened and how to protect your supply chain

100M+ weekly downloads. One compromised maintainer account. A remote access trojan in two active release branches. This is a 30-minute breakdown of the Axios npm supply chain attack – how it happened, why it was hard to detect, and what any engineering team can do right now to reduce exposure. Nigel Douglas, Head of Developer Relations at Cloudsmith, is joined by Jenn Gile, co-founder of Open Source Malware, a community-driven threat intelligence platform focused on malicious open source packages.

The pipeline that never reached production | Harness Blog

Modern CI/CD platforms allow engineering teams to ship software faster than ever before. Pipelines complete in minutes. Deployments that once required carefully coordinated release windows now happen dozens of times per day. Platform engineering teams have succeeded in giving developers unprecedented autonomy, enabling them to build, test, and deploy their services with remarkable speed. Yet in highly regulated environments-especially in the financial services sector-speed alone cannot be the objective.

Ending the Chaos of CLI Version Drift: Introducing the JFrog CLI Control Manager

In a large-scale DevOps environment, small discrepancies lead to massive headaches. You’ve likely experienced it: a script runs perfectly on a developer’s laptop but fails in the production pipeline. You spend hours hunting for the cause, only to discover a mismatch in CLI versions. At JFrog, we know the JFrog CLI is vital to your automation, but managing it manually across thousands of users and pipelines is a hurdle that slows you down.