Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Continuous Integration and Development, and related technologies.

circleci

CircleCI Smarter Testing: Stop running tests that don't matter

Aug 26, 2026 By Nathan Fish In CircleCI
Testing consumes up to 50% of CI/CD pipeline time. That’s the single most expensive place in your delivery pipeline, and a meaningful share of that time is often wasted running tests unaffected by the change. Every time a developer pushes a commit, the full test suite runs. A two-line bug fix in auth.py triggers 2,000 tests, including 1,900 that don’t touch anything near auth.py. Those unrelated tests are overwhelmingly likely to pass, but the pipeline still spends 20 minutes running them.
Read Post

How to Route Package Traffic Through JFrog PTC With Zscaler: Setup and Policy Configuration

Aug 26, 2026 By JFrog In JFrog
JFrog’s Package Traffic Controller (PTC) intercepts an organization’s public package traffic at the network layer and routes it through JFrog, so JFrog Curation policies and audit logging apply to every intercepted install without changing how developers work.
View Video

You can't audit an AI model the way you audit a binary

Aug 25, 2026 By Cloudsmith In Cloudsmith
Open up an AI model and what's actually inside is a floating array of decimal points. No one can look at that and confirm it hasn't been tampered with, doesn't contain bias, or wasn't trained on poisoned data. This video covers why that changes how you need to think about trusting a model: If you can't unpick the model itself, you have to be able to trust its origin.
View Video

"No fix available" is different than "no plan"

Aug 24, 2026 By Cloudsmith In Cloudsmith
Sometimes there's a vulnerability in a package you can't remove. Legacy dependencies don't always come with an easy fix. The one thing you don't do is bury it in the backlog with no dates and no reasoning attached. This video covers what a defensible response actually looks like: Your ability to show your work on unfixed vulnerabilities is more important than simply identifying them.
View Video
jfrog

Fly Graduates: Agentic Repository Experience Lands in the JFrog Platform

Aug 24, 2026 By CTO Office In JFrog
The way software gets built is changing faster than at any point in the last decade, and the software supply chain has to keep up. A year ago at swampUp, we introduced JFrog Fly: the first agentic repository, serving as a fast, AI-native environment to build what a modern, agentic developer workflow could look like, unconstrained by the shape of the enterprise stack. Today, we’re bringing what we learned back home.
Read Post

AI finds vulnerabilities faster than you can fix them

Aug 21, 2026 By Cloudsmith In Cloudsmith
If an AI model can find a vulnerability for an attacker, the same model should help a defender fix it. In practice, the math doesn't favor the defender. This quick video digs into the real asymmetry AI-powered vulnerability discovery creates: The goal is models acting as tools for defenders, not weapons for attackers. Getting there means rethinking how much ground your team can realistically cover on its own.
View Video

Why artifact management can't stop at npm and Python

Aug 20, 2026 By Cloudsmith In Cloudsmith
npm and Python get all the security attention, but attackers don't limit themselves to your highest-volume formats. A Docker image, a Helm chart, or a Rust crate can all be an entry point. If your security policy is built around the formats you use most, the formats you've deprioritized become the blind spot. This video breaks down why artifact management needs to be centralized across every package format, not just the popular ones.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.