Policy-as-Code for AI Developers and Autonomous Software Agents
When agents write code, open pull requests, change infrastructure and call tools, written policies and prompts are not enough. Rules have to…
Tag
CI/CD
13 articles tagged CI/CD.
The AI-Native SDLC: Humans, Agents, CI/CD and Automated Verification
When agents write a large share of code, the question 'how do we know it's right?' moves to the centre of the software development lifecycle…
Building a Secure Agentic SDLC: AI That Writes, Tests and Deploys Code
In an agentic SDLC, AI agents take on work at every stage: specifying, coding, testing, reviewing, releasing and operating. This article des…
The New Developer Workflow: Humans, Coding Agents and CI/CD
In many teams, a typical day now involves dispatching tasks to coding agents, reviewing their pull requests and tuning the pipeline that che…
Agentic DevSecOps: When AI Agents Can Write, Test and Deploy Code
Agents now take part in every stage of the delivery pipeline: writing features, fixing findings, triaging failures and preparing releases. T…
AI Red Teaming for Developers: Testing Agents Before Production
Red teaming used to be something a security team did to a finished system. For AI agents, it has to start with the developers who build them…
AI Agents in CI/CD: Can Agents Test, Debug and Deploy Software?
Coding agents now run inside CI pipelines: triaging failed builds, fixing flaky tests, reviewing pull requests and responding to issues. The…
Building Security Guardrails for AI-Powered Development Teams
This summer delivered a series of warnings for AI-powered development: an agent deleting a production database, a malicious prompt shipped i…
MCP + DevSecOps: Securing AI Agents Inside the Software Lifecycle
MCP servers are now part of how software gets built: developers connect coding agents to repositories, ticketing, CI, cloud consoles and dat…
From DevOps to AI-Augmented DevOps
LLMs are finding their way into every stage of the DevOps loop: explaining failed builds, drafting infrastructure code, summarising incident…
Software Supply-Chain Security: Dependencies, Build Systems and CI/CD
Over the holidays, a dependency-confusion attack hit PyTorch's nightly builds, and in January CircleCI told every customer to rotate their s…
DevSecOps: Bringing Security Into the Development Pipeline
Teams deploy dozens of times a day, and a security review at the end of the release cycle cannot keep up. DevSecOps puts automated security…
Secrets Management in CI/CD: Stop Putting Credentials in Your Pipelines
The Codecov breach disclosed last month showed how a single tampered script could quietly collect the credentials stored in thousands of cus…