Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

cloudzero

How to prove the business value of AI

Jul 28, 2026 By Keith MacKenzie In CloudZero
Proving AI business value means sorting every AI investment into one of four buckets - revenue growth, cost avoidance, productivity gain, or risk reduction - then tracking spend at the unit level (per feature, customer, or team) so each dollar has a traceable return. Most companies measure one bucket well and leave the rest unattributed. That gap is why the same AI deployment can look like a $40M win and a public reversal at the same time.
Read Post
harness

Updating Reference Data with Rollbacks Using Harness Database DevOps | Harness Blog

Jul 28, 2026 By Animesh Pathak In Harness
Versioning reference data in Git with Liquibase OSS changelogs enables consistent, auditable, and automated deployments across environments. Using loadUpdateData with versioned CSV files provides fast, reliable rollbacks and reduces production risk. Modern applications do not just depend on schema changes. They also depend on data that powers the application itself.
Read Post

Golden paths: how to ship securely without slowing developers

Jul 28, 2026 By Cloudsmith In Cloudsmith
The secure path and the easy path should be the same path. Ralph McTeggart (Principal Engineer), Alex Franzmann (Customer Onboarding Team Lead), and Claire McDyre (Product Manager) at Cloudsmith lay out how platform teams can deliver supply chain security as a capability rather than a checklist. The argument runs from first principles: make a private registry the default, automate policy enforcement at the global level, and extend that same logic to compliance – so SBOM generation happens in the pipeline, not as a developer's manual task.
View Video

Supply chain hit: the first hours are about "am I affected?"

Jul 27, 2026 By Cloudsmith In Cloudsmith
The first two to three hours after a supply chain compromise aren't about remediation – they're about figuring out whether you're affected at all. That requires two things: a feed of compromised packages you can cross-reference against what you're using, and an audit trail showing which developers pulled which packages and when. Teams that can answer "are we affected?" in 30 minutes have that data pre-built into their platform. Teams that don't are still piecing it together at hour three. Protect your supply chain with Cloudsmith.
View Video
certkit

Public mTLS client-auth certificates stop renewing in October

Jul 27, 2026 By Todd H. Gardner In CertKit
Chrome’s root program decides what certificates will be trusted by Chrome, and what they are allowed to do. Recently, Google decided that client authentication isn’t on the list. Under Chrome Root Program Policy v1.8, every certificate issued on or after March 15, 2027 can assert only one Extended Key Usage (EKU): server authentication. Let’s Encrypt moved early.
Read Post
Teneo

Why Written AI Policies Alone Won't Protect Your Organization

Jul 27, 2026 By Teneo In Teneo
Most organizations have responded to the rapid growth of AI by creating written policies that define acceptable use. A clear AI policy can establish expectations, assign responsibilities, and help employees understand how AI should and shouldn’t be used. But policy alone can’t provide oversight and is almost impossible to enforce at scale without the right tools.
Read Post
gitkraken

Why We Built Kepler: One Engineer's Frustration With Fifteen Open Terminals

Jul 27, 2026 By Jade Nangah In GitKraken
We didn’t set out to build a new category of product. We set out to stop juggling. That’s the word Gyo, the senior engineer who built the first version of Kepler, keeps coming back to when he talks about where it started. “I have a lot of terminals opened, and with all those tabs, it was very difficult for me to keep focused on what I was doing,” he says. “I’m not a juggler.”
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.