Feed

Secure AI agents with HashiCorp Boundary

Enable AI agents to securely access your resources while operating within enterprise identity, access, and audit controls.

Terraform provider for Google Cloud 8.0 now generally available

The Terraform provider for Google Cloud 8.0 builds on expanded infrastructure discovery workflows, modernizes provider defaults, removes support for retired Google Cloud services, and improves consistency between Terraform configurations and Google Cloud APIs.

AI agents need continuity, not just context

Pulumi Neo works on infrastructure the way an engineer does: it clones repositories, edits files, installs dependencies, runs previews, and produces intermediate work along the way. A task is not only a conversation with a model. It is also a working directory that has to survive long enough for the agent to keep making progress. Imagine asking an agent to upgrade a Pulumi provider version across…

CI/CD Security Best Practices: A 2026 Pipeline Checklist

CI/CD security best practices for 2026: secrets management, scoped access, dependency scanning, signed artifacts, and audit logging in one checklist. | Blog

AI Writes Code Fast. Can You Trust What Gets Deployed?

AI has solved writing code fast. The new bottleneck is trusting what actually reaches production. Here's what that requires. | Blog

Best AI Security Solutions in 2026: A Buyer's Guide

Compare the best AI security solutions in 2026: LLM security, model monitoring, and AI-powered SOC tools, plus buying criteria and vendor questions. | Blog

{unscripted} Chicago and Columbus recap

{unscripted} Chicago and Columbus focused on AI code that doesn't ship, compliance as a feature, and the human cost of machine speed. | Blog

Git Blame Explained With Examples: Who Touched the Code?

In this post, we’ll take a look at the git blame command including how it works, how it differs from similar commands, and offer some examples.

Configuration as Code: Everything You Need to Know

Streamline your application management using Configuration as Code. Learn how CaC can save time, enhance flexibility, and improve system uptime.

Baking Security into Your Software Delivery Pipeline

Baking Security into Your Software Delivery Pipeline

Parallelism and Distributed Builds with Jenkins

Maximize your CI/CD efficiency with Jenkins parallelism. Learn to optimize pipelines, speed up builds, and enhance resource utilization. Try it now!

What Does Tessl Do? Key Features and Where It Fits

What Tessl does for AI agent skills, what it doesn't solve, and where Port fits in, whether you run Tessl alone, Port alone, or both.

The New Engineering Problem: Managing What AI Decides to Import

AI makes it faster to turn an idea into working software. A developer describes a feature, integration, or service and receives an implementation in minutes. Coding agents go further by editing files, running tests, troubleshooting failures, and preparing changes for review.

How to Audit Cloud Spend When You Inherit a New Environment

A practical guide to auditing cloud spend when you inherit a new environment: find waste, attribute costs, detect drift, and prevent overspend.

Cloud Cost Optimization Strategies for 2026 to Reduce Spend

Learn how to allocate cloud spend, rightsize Kubernetes safely, stop idle resources, manage commitments, and prevent cost spikes without risking reliability. | Blog

How to improve agent experience (AX) with CI

What the EU AI Act means for AI governance

Teams shipping AI in the EU must be able to demonstrate compliance. Here's how LaunchDarkly helps.

GitHub External Custom Properties: Sync Business Context | Port

Sync Port's business context into GitHub external custom properties to search, govern, and set ruleset guardrails on your repos.

What's New in Port: August 2026 Release Notes

August brings Port Workflows to General Availability (GA) as the governed orchestration layer for agents, automations, and approvals, alongside new Cursor Cloud Agent syncing and triggering directly from workflows and a wave of workflow, integration, and governance improvements rounds out the month.

Take AI Agents from Demo to Production with Port AI Builder

Why most AI agents stall before production, the five things that get them there, and how Port AI Builder builds them from a plain-language prompt.

Plugins Library: Ready-Made Plugins for Platform Teams

The Plugins Library brings ready-made plugins into Port: DORA dashboards, dependency trees, scorecard views, calendar, surveys, and more.

GitLab Critical Patch Release: 19.4.1, 19.3.3, 19.2.7

A faster, more reliable GitHub Actions alternative: Run Actions on CircleCI

Top AI Infrastructure Tools and How to Choose the Right One

Learn what AI infrastructure tools are, the main categories, top examples, and how to choose the right ones for your workloads.

Sonatype Is Now Awardable on the Platform One Solutions MarketPlace

Software delivery across th e Department of War (DoW) dep ends on speed, but growing use of open source, third-party components, and AI-assisted development makes the software supply chain harder to control. DoW teams need to identify and address risk early without introducing manual gates that slow mission delivery.

Agentic coding in the enterprise: Is your pipeline ready?

AI writes 61% of enterprise code. Learn what agentic coding means for production, cost, and governance, and how to prepare your pipeline.

How to design GitLab for enterprise scale

At enterprise scale, even small architecture choices can have outsized consequences. A deployment that works for a handful of teams can become a constraint once thousands of developers, repositories, and pipelines depend on it. That makes each decision made before rollout especially consequential. For example, your: Deployment model defines what your team must operate Runner strategy shapes how…

How GitLab reduced code-per-agentic-flow ratio by 45%

GitLab Duo Agent Platform orchestrates and automates complex tasks through agentic flows. A key part of the platform is the Flow Registry, a declarative configuration framework, built from reusable components, that compiles YAML into fully functional LangGraph flows. By using Flow Registry, agent builders — both our GitLab engineers and our customers can use declarative YAML configurations…

MLOps Solutions for Production Machine Learning

Learn how MLOps solutions support experiment tracking, model serving, monitoring, feature management, governance, and production rollouts.

10 tips to improve your coding agent game

In May I told you to trim the root instruction file until it fits on one screen . I also said anything that needs a hard guarantee belongs in a hook. In June I argued that the model that wrote the code shouldn’t be the one grading it . Several papers published this summer tested related questions. Most of the findings support that advice, while the research on subagent costs calls for more…

What is a software factory?

Why Are OSS Attackers Always After CI/CD Credentials?

CI/CD credentials are a prime target of malicious open source packages because of the sheer authority those credentials carry. Depending on their privileges, they can provide access to source code, build systems, package registries, cloud infrastructure, and production delivery.

Securing the software factory at machine speed

I joined GitLab at a moment when the way teams build and secure software has been changing rapidly. GitLab CEO Bill Staples recently framed that shift in When Code Is Abundant . When code is no longer the bottleneck, trust becomes scarce, and that constraint shows up first in what reaches production. As a CISO accountable for the same decisions as my peers, my operating thesis is simple: Agentic…

GitLab 19.4 released

HCP Vagrant deprecation: important dates and migration guidance

HCP Vagrant will be deprecated in 2026. Users should begin planning migrations as box creation, support, and operations are phased out.

Simplify compliance with the native pre-written policy experience in HCP Terraform

Teams can now browse HashiCorp-managed pre-written policies, add them to a policy set, and apply common compliance guardrails directly in HCP Terraform.

How to build a Language Server Protocol (LSP) plugin for Claude Code

Stories from the Factory Floor: Why AI software factories won’t always look like factories

There's a world of difference between wiring up coding agents for a side project and building a software factory inside a codebase that ships to thousands of customers at scale.

JFrog Artifactory Supports LuaRocks Hosting for NGINX, OpenResty and Kong

If your NGINX/OpenResty servers or Kong gateways pull Lua modules straight from public luarocks.org, one upstream outage can stall every build and deploy that depends on a “rock”. With LuaRocks support in JFrog Artifactory, you host and proxy those modules from a private LuaRocks registry you control, using the native experience you expect, not a …

Beyond the Hyperscalers: What Actually Protects You

Recorded September 3, 2026. Quotes are lightly edited for clarity. Maybe this sounds familiar. You run infrastructure at a company that isn’t American. Your workloads are on AWS, Azure, or Google Cloud, probably more than one, because that is what everyone picked. Until recently nobody asked you where the data lives or who can reach it. Now you’re getting questions. Legal wants to…