Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Share packages across your workspace with internal packages

We launched Bitbucket Packages to give teams one place to manage code, pipelines, and artifacts, and we’ve been expanding it ever since, first with Maven and npm, then PyPI and NuGet. Every one of those packages has shared one trait: it lives inside a single repository and inherits that repository’s permissions. Most of the time, that’s exactly what you want. But it also means sharing a package across repositories has meant granting people access to source code they never needed to see.

Cortex Platform Walkthrough

In this video, Becka gives a guided tour of Cortex, the Engineering Operations Platform that runs mission control for your AI software factory. Learn how to centralize visibility, clarify ownership, and automate standards across your entire software ecosystem. What we cover: Why Cortex: Cortex is where engineering leaders run mission control for the AI software factory: the visibility, intelligence, and controls to keep teams shipping fast without letting accelerated output turn into accumulated risk to reliability, security, and cost.

Scanners aren't enough. Here's the layer most teams are missing.

Vulnerability scanners tell you what's wrong with what you already pulled. They don't stop a malicious package from entering your environment in the first place. A private registry with minimum release age policies adds that missing layer – packages newer than two or three days don't reach developers until the industry has had time to identify and remove malicious ones from public registries. Active campaigns like TeamPCP are targeting npm, PyPI, and Maven Central right now. The gate has to come before the scan. Cloudsmith provides that gate.

Don't add a read replica until you've read this

As the size and complexity of their relational database workload grows, every company eventually goes through the process of off-loading work on a read replica. It comes with lots of benefits, but at a cost of increased complexity. This article is about how we dealt with that, a lot of learnings, and some useful techniques. incident.io is an incident management product relied on by thousands of customers to be the thing that supports them through anything from a minor blip to a full outage.

Preparing for CIP-015: Building Operational Resilience Through Visibility, Detection, and Segmentation

Utility organizations preparing for CIP-015 should think beyond compliance. The organizations that will be best positioned are those investing in comprehensive network visibility, continuous operational intelligence, and segmentation to strengthen cyber resilience and operational continuity. This article explains what CIP-015 means, why it matters, and how Teneo helps utilities build a practical roadmap toward operational resilience.

How to Minimize Downtime During a Microsoft 365 Migration

Moving your organization's email, files, collaboration tools, and user accounts to Microsoft 365 is a major step toward a more flexible and secure workplace. Whether you're replacing an older email platform, merging companies, or reorganizing your IT environment, the migration process requires careful planning.

PostgreSQL and MariaDB autoscaling: how full-stack autoscaling closes the database gap

When platform providers talk about autoscaling, they usually mean one thing: application autoscaling, adding or removing web instances based on traffic. The pattern is well understood. Define a metric, set a threshold, and let the platform act on it. Most platforms still leave database capacity as a separate, mostly manual problem. Teams either pre-provision for the worst hour of the worst day, upgrade plans on a calendar, or wire together their own scaling logic on Kubernetes or RDS.

The True ROI of Cloud Migration: Modernization, and AI Unlock

For years, the cloud migration business case was framed around one comparison: “Will AWS be cheaper than our data center?” That question still matters, but it is no longer where the value is. The 2017-2024 wave of mass migration is largely complete. Most enterprise workloads are already in the cloud - often in a lift-and-shift state: oversized instances, commercial-OS BYOL, on-prem-shaped network designs, and legacy frameworks that block the next step.