DevOps, CI/CD & Platform Engineering

Pipelines, containers, Kubernetes, IaC/GitOps, observability, and team “golden paths.”

  • 5 Subtopics
  • 12 Tracked terms
  • Last 30 days Feed window

Inside DevOps, CI/CD & Platform Engineering

What this topic collects on

An article joins this feed when it matches these terms. Each one is also a search of its own.

Latest in DevOps, CI/CD & Platform Engineering


dev.to > aoligama > when-your-impact-is-no-longer-measured-in-pull-requests-l07

When Your Impact Is No Longer Measured in Pull Requests

45+ min ago   (1020+ words) I recently came across a post about the transition from Senior Developer to Tech Lead, and it got me thinking about something I've been experiencing myself: how much your definition of productivity changes when you move into technical leadership. For…...


dev.to > anoymask > indexed-btree-npm-supply-chain-malware-executes-at-runtime-and-uses-a-smart-contract-on-ethereum-d83

indexed-btree: npm Supply Chain Malware Executes at Runtime and Uses a Smart Contract on Ethereum Sepolia for C2

36+ min ago   (1449+ words) 1. Basic Information Original Title: npm 'btree' Malware Campaign Affects Millions of Downloads, No Need for Install Script Source: Checkmarx Zero Publication Date: 2026-09-17 Update Date: None Severity: High Severity Justification: The malicious npm packages do not use install scripts and instead…...


dev.to > anoymask > overpatch-and-heapjack-two-techniques-for-bypassing-codexs-write-restrictions-and-escaping-its-48of

Overpatch and Heapjack: Two Techniques for Bypassing Codex's Write Restrictions and Escaping Its Read-Only Sandbox

36+ min ago   (1542+ words) 1. Basic Information Original Title: Escaping the OpenAI Codex sandbox, twice Source: Accomplish AI Published: 2026-09-15 Updated: None Severity: High Basis for Severity: Researchers verified Overpatch, which writes outside the workspace using workspace-write, and Heapjack, which executes host commands from the strictest…...


dev.to > uhltak > k3s-statt-kubernetes-warum-die-rancher-distribution-unschlagbar-ist-5d0p

k3s statt Kubernetes: Warum die Rancher-Distribution unschlagbar ist

52+ min ago   (691+ words) Hier kommt k3s ins Spiel. Entwickelt von SUSE (bzw. Rancher), ist k3s keine abgespeckte Spielzeugversion, sondern eine hochkompakte, aber voll CVE-konforme Kubernetes-Distribution. Sie wurde speziell für IoT, Edge Computing und CI/CD-Pipelines konzipiert, hat sich aber längst auch als extrem robustes Fundament…...


dev.to > bokuwalily > one-line-of-mv-kills-the-4x-duplicate-run-after-recovery-making-launchd-queue-processing-idempotent-1jl9

One Line of mv Kills the 4x Duplicate Run After Recovery: Making launchd Queue Processing Idempotent

54+ min ago   (1359+ words) Six months ago my side business made ¥0 a month. This month it's ¥1.2M, running on an autonomous... Tagged with automation, launchd, bash, claudecode....


dev.to > miruky > build-a-dynamodb-outbox-and-an-idempotent-sqs-consumer-in-the-console-1e2b

Build a DynamoDB Outbox and an Idempotent SQS Consumer in the Console

58+ min ago   (1251+ words) Introduction Hi, I'm miruky. A database commit can succeed while the caller believes... Tagged with aws, serverless, dynamodb, tutorial....


dev.to > silentruntime > why-i-ditched-pomodoro-for-the-5010-protocol-and-how-it-fixed-my-deep-work-16ml

Why I Ditched Pomodoro for the 50/10 Protocol (And How It Fixed My Deep Work)

1+ hour, 10+ min ago   (783+ words) As developers, we love to romanticize the hacker in the basement trope. But the reality is often a Slack notification away from a 45 minute rabbit hole. We have all been there: you open your editor, ready to tackle a complex…...


dev.to > susumun > semantic-versioning-semver-why-version-numbers-have-three-parts-1f74

Semantic Versioning (SemVer): Why Version Numbers Have Three Parts

1+ hour, 15+ min ago   (419+ words) Most software version numbers look like 1.6.11 — three numbers separated by dots. This isn't an arbitrary naming choice; it follows a widely adopted convention called Semantic Versioning, or SemVer. This article looks at why version numbers are split into three parts,…...


dev.to > cortia > the-commit-that-wouldnt-merge-48en

The Commit That Wouldn’t Merge

1+ hour, 28+ min ago   (42+ words) The Invalid State of PR #48 The merge button was gray. Thirty cycles in, that was the only... Tagged with ai, autonomousagents, python....


dev.to > jeffreyciend > the-artifact-repository-is-a-trust-root-reading-the-jfrog-artifactory-authentication-bypass-38f6

The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass

1+ hour, 27+ min ago   (1173+ words) Most organizations do not think of their artifact repository as a security boundary. It is where build outputs go, and where dependencies come from. When an attacker takes it over, both directions of that pipeline become hostile at once. The…...