Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

5 Optimization Blockers You Didn't Know Were Inflating Your Cloud Bill

Most cloud-native cost tools are built to find and address waste reactively. Underutilized nodes, oversized requests, and idle workloads are revealed in the utilization data, the fixes are well documented, and the initial savings these tools drive are very real. But what we’ve seen consistently across clusters is a different category of blocker, one that quietly prevents consolidation and strands capacity your autoscaler can never reach. They don’t surface in dashboards as obvious waste.

Why AI Governance Is Now the Biggest Challenge for Enterprise AI

For the past couple of years, most conversations about AI in business have centered on adoption. Which tools should organizations deploy? Where can AI improve productivity? How quickly can it deliver value? Those questions still matter, but they are no longer the most difficult ones to answer. AI is now appearing across business applications, employee workflows, development environments, and customer-facing services.

How to Use JFrog CLI Without Editing Your CI Scripts

Using JFrog CLI used to come with a catch. To run a build through it, you had to put it in front of the command. For example, jf npm install instead of npm install or jf mvn package instead of mvn package per the example below: npm install → jf npm install mvn package → jf mvn package Doing that once is easy enough.

Terraform Strings: Interpolation, Heredoc & Built-In Functions

A Terraform string is just a sequence of characters, but almost everything you write in HCL touches one: resource names, tags, file paths, generated policies, connection strings. Knowing how Terraform builds, combines, and templates strings will save you from some of the more confusing errors you'll hit in a growing configuration.

CRA turns software trust from assumed to legally required

For years, buying software meant trusting the vendor. The Cyber Resilience Act changes that relationship by codifying what vendors must do – auditing dependencies, confirming exploitable vulnerabilities, and enforcing security best practices – as legal obligations, not internal choices. For customers, that means software safety is no longer a matter of brand reputation. For vendors, it means governance gaps that were once internal concerns are now deal blockers.

From Documentation to Discipline: Enforcing Audit-Ready Governance Across All Infrastructure

Is your organization truly audit-ready or just preparing when auditors arrive? In this webinar, Puppet's Robin Tatam and Betadots CEO Martin Alfke share practical strategies for building audit-ready operations through automation, traceability, and accountability. Learn how to reduce audit friction, strengthen compliance, improve governance, and maintain control across rapidly changing infrastructure.

Building a Control Framework for the AI SDLC

Since November, Kosli’s own engineering team has been running a live experiment: what happens to code review when the thing generating the code - and increasingly, the thing reviewing it - is an AI, not a person. Alex Kantor, Kosli’s Director of Technology, walked through that experiment in this webinar: what broke, what it cost to fix, and what four “obvious” assumptions in a standard code review control turned out not to hold once you took the human out of the loop.