For years, security testing has been something that happens after the code is written — sometimes long after. Developers push changes, SAST tools scan for known patterns, and security teams work through backlogs that never seem to shrink. It’s a reactive model, and attackers have gotten very good at exploiting the gaps it leaves open. … Read more
According to Sonatype, modern applications are composed of up to 90% open source components. This reliance has significantly accelerated development by allowing teams to reuse existing libraries and modules instead of building functionality from scratch. Code repositories serve as the primary mechanism for distributing and maintaining open source software, whether developed by independent communities or backed … Read more
Modern software development moves at a pace that would have been unthinkable a decade ago. Organizations push updates on demand, respond to vulnerabilities within minutes, and integrate new features at a relentless pace. This acceleration is driven by continuous integration and continuous delivery (CI/CD). To understand how CI/CD reshapes the security posture of modern organizations, … Read more
Artificial Intelligence is pushing DevSecOps into a new phase where security is no longer just about detecting vulnerabilities, but increasingly about resolving them automatically within the flow of software delivery. As many organizations are discovering, DevSecOps historically gave teams visibility into risk. AI is now turning that visibility into automated remediation. This evolution has taken … Read more
Last week my colleague Pieter suggested me a nice article about “Long-term DORA data reveals systemic performance plateaus and shifts, allowing organizations to connect improvements to architectural, cultural, and process changes.” So starting from my current level of Jira Lead Time Analyzer i developed in vibe coding, I tried to improve my report accordingly again … Read more
In modern software delivery, CI/CD pipelines are the backbone of speed, consistency, and reliability. They help engineering teams build, test, and deploy code quickly while keeping releases predictable across environments. But as systems grow, pipelines often become a hidden bottleneck. What starts as a simple setup for a small project can gradually turn into a … Read more
Introduction You are an administrator of a large Kubernetes cluster shared by many teams. You want to grant each team access only to the resources they are permitted to use. In this guide, I’ll show you how to configure permissions with Tailscale and secure your Kubernetes API so you can provide access without exposing your … Read more
Introduction SeaweedFS is a distributed object store and file system that can expose an S3-compatible API. It is useful when you want to replace MinIO with lighter self-hosted object storage for applications such as photo backups, static hosting, or internal services that expect S3. The reason to move away from MinIO is simple: the public … Read more
These past few days I’ve been working on extracting more valuable insights from Jira using AI, with the goal of building useful applications around that data. I started with Amazon Q, and honestly, the experience was impressive. In a short time, I had an app with a clean interface and a strong PDF report. If … Read more
Artificial intelligence is evolving fast, but one challenge keeps showing up again and again: connection.AI models are getting smarter, yet they still depend on fragmented, custom-built integrations to access tools, systems, and data. That means every new workflow often requires another layer of glue code, another adapter, or another brittle workaround. This is where Model … Read more