Tag: infrastructure security
AI Can Generate Your Infrastructure. Can Your CI/CD Pipeline Trust It?
Oreoluwa Omoike | | AI code vulnerabilities, AI coding assistants, AI-generated code, AI-generated infrastructure, Checkov, CI/CD security, Conftest, devsecops, IaC security, infrastructure as code, infrastructure security, Kubernetes security, OPA, platform engineering, policy as code, provenance tracking, secret scanning, secure CI/CD, Terraform security, tfsec, Trivy, TruffleHogAI-generated infrastructure code is exposing a growing security gap, pushing platform teams to add stronger automated gates, provenance tracking and human review before Terraform, Kubernetes and CI/CD changes reach production ...
Agentic DevSecOps: AI Security Co-Pilots for Your CI/CD Pipeline
Joydip Kanjilal | | agentic AI, AI copilots, AI Governance, AI incident response, AI pipeline management, AI security, AI security agents, AI threat detection, AI vulnerability scanning, AI-driven security, AI-powered DevSecOps, application security, autonomous AI agents, autonomous security testing, CI/CD security, Cloud Security, continuous security monitoring, cybersecurity automation, devops security, devsecops, devsecops automation, infrastructure security, intelligent automation, real-time threat intelligence, SDLC security, Secure software delivery, security automation, security operations, security orchestration, security posture management, software development lifecycle, software security, threat remediationThe emergence of AI has brought endless possibilities and innovative opportunities in today’s ever-changing, fast-paced technology landscape. AI is helping development teams produce software significantly faster than ever before. AI-enabled DevSecOps tools ...
Risk-Based Review for Infrastructure as Code Pull Requests
Naga Krishna Reddy Muppidi | | automated review systems, blast radius analysis, change approval workflow, change management, CI/CD governance, cloud infrastructure, Cloud Security, deployment risk, deployment safety, devops, devsecops, Engineering Governance, engineering productivity, gitops, IaC review, infrastructure as code, infrastructure auditing, infrastructure automation, infrastructure change tracking, infrastructure compliance, infrastructure controls, infrastructure delivery, Infrastructure Governance, infrastructure observability, infrastructure reliability, infrastructure risk scoring, infrastructure security, operational risk management, platform engineering, platform operations, platform team workflows, policy as code, production changes, production deployments, pull request review, reviewer fatigue, reviewer workflows, risk assessment, risk-based review, security review automationNot every infrastructure pull request deserves the same review path. A tag change in a development account and a network-policy change in production should not create identical reviewer load. When every change ...
