Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on Continuous Integration and Development, and related technologies.

DevOps and CI/CD Practices for Scaling Mobile App Backends in Fintech

Fintech mobile applications operate in an environment where performance, reliability, and security are equally important. A slow payment request, an API outage, or a failed deployment can affect thousands of transactions and quickly undermine customer trust. As a product grows, its backend must handle rising traffic without sacrificing stability.

Automate all the things: How to use Grafana Cloud's AI to relieve the operational burden

Continuous integration and continuous delivery (CI/CD) have dramatically changed how we ship software. But once code reaches production, the operational work is still surprisingly manual. Engineers continually monitor systems, investigate unexpected behavior, and decide which issues require action. And that is where the next opportunity for AI-driven automation lies. For example, in today's CI/CD workflows, someone refreshes the pipeline page to see whether the queue has moved.

Agent Guard: Control AI Assets Before They Become Shadow AI

A developer on your team just told Claude Code to connect to a new MCP server, the protocol coding agents use to reach organizational tools and data. Nobody in security reviewed it. Nobody in security even knows it happened. For two-thirds of enterprises, the primary obstacle to scaling agentic development isn’t budget or headcount — it’s security risk.

Golden paths: how to ship securely without slowing developers

The secure path and the easy path should be the same path. Ralph McTeggart (Principal Engineer), Alex Franzmann (Customer Onboarding Team Lead), and Claire McDyre (Product Manager) at Cloudsmith lay out how platform teams can deliver supply chain security as a capability rather than a checklist. The argument runs from first principles: make a private registry the default, automate policy enforcement at the global level, and extend that same logic to compliance – so SBOM generation happens in the pipeline, not as a developer's manual task.

What is an AI sandbox? A developer's guide

An AI sandbox is an isolated environment where code from an AI coding agent runs without direct access to your machine or your production systems. If the agent runs a destructive command or a mistaken script, the damage stays contained inside the sandbox. Developers use AI sandboxing to let agents execute code freely while keeping the host and its credentials out of reach.

How to Connect Cursor to CircleCI: AI-Powered CI/CD Debugging with MCP

Stop context-switching between your IDE and CI dashboard. This video shows you how to connect Cursor to CircleCI using the CircleCI MCP server so your AI agent can read pipeline failures, validate configs, and trigger builds without leaving your editor. In this demo, we introduce a bug, let CI catch it, and watch the agent diagnose and fix it autonomously through a full green pipeline. No manual log hunting required.

Supply chain hit: the first hours are about "am I affected?"

The first two to three hours after a supply chain compromise aren't about remediation – they're about figuring out whether you're affected at all. That requires two things: a feed of compromised packages you can cross-reference against what you're using, and an audit trail showing which developers pulled which packages and when. Teams that can answer "are we affected?" in 30 minutes have that data pre-built into their platform. Teams that don't are still piecing it together at hour three. Protect your supply chain with Cloudsmith.