Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

OWASP CI/CD Part 5 - Insufficient PBAC

One of the more overlooked yet critical vulnerabilities highlighted in the OWASP Top 10 for CI/CD Security Risks is Insufficient PBAC (Pipeline-Based Access Controls). Let’s unpack what PBAC is, why it's essential, and how you can leverage modern access control tools like Open Policy Agent (OPA) and Rego to mitigate these risks effectively.

Bunnyshell Named Startup of the Year 2024 in Palo Alto by HackerNoon

"If AI is writing the code, we make sure it runs." Alin Dobra, Founder Bunnyshell We’re proud to announce that Bunnyshell has been named Startup of the Year 2024 in Palo Alto by HackerNoon! This recognition reflects the work we’ve done to build the Software Delivery Platform for a new era—where code is written by AI, but validated by real environments.

What if your container images were security-maintained at the source?

Software supply chain security has become a top concern for developers, DevOps engineers, and IT leaders. High-profile breaches and dependency compromises have shown that open source components can introduce risk if not properly vetted and maintained. Although containerization has become commonplace in contemporary development and deployment, it can have drawbacks in terms of reproducibility and security.

Top 5 Observability Tools DevOps Teams Should Know

Observability and monitoring are the cornerstone of resilient, high-performing applications. Nearly every IT or software engineering leader we come into contact with emphasizes the importance of the ability to understand and diagnose what is going on with their applications at all times. Having clear and concise visibility into your applications is no longer optional.

How to Configure and Optimize Prometheus Data Retention

Prometheus can be lightweight to start with, but once it’s in production, storage usage tends to grow faster than expected. Managing how long data is kept becomes critical, especially when you're working with limited disk space or tight budgets. This guide outlines the key concepts behind Prometheus data retention, how to configure it effectively, and what to watch out for.

What's New in Turbo360 - Azure Budget planner, Executive cost summary report, Snooze monitoring....

Turbo360 brings a suite of enhancements added to elevate your Azure management experience. Hit play to hear what's in store for this month. Introduction (00:00:00) Executive cost summary report (00:00:15) Budget planner (00:01:14) Pause monitoring feature (00:01:51) Exporting and Importing business transactions (00:02:23) Direct Access to Azure Resources (00:02:55) Conclusion (00:03:17)

Watch Automation in Action - Live! (June 2025)

Tired of endless alerts, escalating ticket volumes, and constant firefighting? It’s time to take back control. Join our next live demo to see how the Resolve platform orchestrates workflows that actually work! Reduce noise, slash resolution times, and free up your IT and network teams to focus on what really matters. We’ll show you how Resolve can: Get an exclusive, behind-the-scenes look at how automation and orchestration can help you scale your operations efficiently.

Hyperparameter tuning for LLMs using CircleCI matrix workflows

Hyperparameter tuning is a critical step in optimizing large language models (LLMs). Parameters such as learning rate, batch size, weight decay, and number of training epochs can significantly affect convergence behavior and final model performance. While several approaches like grid search or random search are widely used, executing them manually is inefficient; especially when each training run is compute-intensive.

Working with GPUs on Kubernetes and making them observable

GPUs are everywhere powering LLM inference, model training, video processing, and more. Kubernetes is often where these workloads run. But using GPUs in Kubernetes isn’t as simple as using CPUs. You need the right setup. You need efficient scheduling. And most importantly you need visibility. This post walks through how to run GPU workloads on Kubernetes, how to virtualize them efficiently, and how Coroot helps you monitor everything with zero instrumentation or config.