Cut AI Agent Validation Startup Time From 45 Seconds to 12
A fresh Chunk Sidecar took 45.6 seconds to start. With a snapshot, it only took 12.
Operations | Monitoring | ITSM | DevOps | Cloud
The Place Where Modern Operations & Technology Come Together
The latest News and Information on Continuous Integration and Development, and related technologies.
Shai-Hulud style attacks need more than scanning
Pre-install scripts mean a malicious package can compromise a developer's laptop the moment it's pulled – no build, no deploy, no install required. That breaks the old model where scanning catches a bad package after the fact, when it's already too late. The fix is active policy enforcement at the point of pull, using signals like package age, signed provenance, and maintainer trust to filter out malicious packages before they ever land.
Upgrade Your AWS Deploy Orb to Get Deploy Markers
Upgrade to the latest version of your AWS deploy orb to get automatic registration of deploy markers. This will give you instant access to deployment timeline, auto-rollback, and version comparison when something breaks — for about five minutes of effort. It will also switch you to OIDC, so there are no long-lived keys to manage. It’s a single version bump. Here’s how.
Code Ownership in the Age of AI: Who's Responsible When Things Break?
AI wrote the code, but when something breaks, that's still on you. Code ownership matters more than ever.
Boost Is Now In Public Preview
Today, we’re excited to announce that Boost is moving out of beta and into public preview. After months of building, breaking, and rebuilding inside JFrog’s own R&D organization, Boost is ready for the world. If you are currently running into token limits, unpredictable costs, or runaway usage from AI agents, Boost was built for you. It has already helped our teams reduce token spend while maintaining performance.
5 takeaways from the State of Software Delivery Q2 Pulse report
AI is pushing code volume up almost everywhere. Shipping it is still the hard part, and the gap between leaders and everyone else is getting wider. Today we’re releasing the 2026 State of Software Delivery Q2 Pulse report, a shorter check-in between our annual reports. We analyzed more than 20 million CircleCI workflows from March 2026 to see what’s changed since the comprehensive 2026 State of Software Delivery report we published in Q1.
How to Set Up Codex with CircleCI Plugin (Full Demo)
Learn how to connect OpenAI Codex to CircleCI so your coding agent can check pipelines, diagnose failed builds, fix bugs, and iterate until your CI pipeline is green. In this step-by-step demo, we walk through how to install and authenticate the CircleCI CLI, install the CircleCI plugin for Codex, validate your CircleCI configuration, and give Codex direct access to CI feedback. You’ll see how Codex can.
Make SBOM generation a build step, not a compliance project
Compliance work that lives outside the build pipeline becomes developer friction – and friction kills adoption. The simpler fix is to make SBOM generation a standard pipeline step via a reusable template, with output routed automatically to central storage and surfaced to the teams who need it. When developers can see their own license issues and vulnerability exposure without filing a ticket, compliance stops being a tax and starts being a byproduct of shipping.
Beyond Tokens SF: Best Ideas of the Evening
AI agents are changing how software gets built, but the infrastructure around them hasn’t caught up. Agents burn through tokens on noise. They take actions they shouldn’t. Context evaporates between releases. And most delivery pipelines were never designed for the pace and volume of agentic development.
Your AI agent just fixed your CI without leaving the terminal
Claude Code + CircleCI MCP = no more hunting through build logs.