#DevSecOps

LLM Evaluation: Beyond Benchmarks

GitHub shares critical lessons on evaluating LLMs for production, emphasizing product decisions and rigorous testing over benchmarks.

GitHub Agent Apps Integrate Workflows

GitHub's new agent apps bring Amplitude, LaunchDarkly, PagerDuty, and Endor Labs into the pull request workflow, reducing context switching.

GitHub Universe 2026 Schedule Drops

GitHub Universe 2026 schedule is out, focusing on AI development, Copilot, and enterprise DevSecOps with top industry speakers.

GitHub Hardens npm, Actions Against Attacks

GitHub enhances npm and Actions security with new features to combat sophisticated supply chain attacks, focusing on account protection, workflow controls, and credential management.

AI Streamlines DevSecOps Documentation

GitHub's Agentic Workflows are automating cross-repository documentation, ensuring features ship with accurate, engineer-reviewed docs.

GitHub Security: 6 Essential Settings

Six essential, free GitHub security settings can bolster project defenses against common attacks, closing critical vulnerabilities.

Dawnguard Automates Secure Cloud Design

Dawnguard launches its security architecture automation platform, aiming to embed security from the design phase of cloud systems, backed by $6.3M in funding.

GitHub Bug Bounty Gets Stricter

GitHub updates its bug bounty program, prioritizing quality submissions, proof of concept, and clarifying shared responsibility amid rising AI-driven research.

GitHub's Free Code Scan

GitHub introduces a free, one-click Code Security Risk Assessment to quickly identify vulnerabilities across an organization's codebase.

GitHub's Security Toolkit

GitHub Advanced Security integrates tools like secret scanning, Dependabot, and CodeQL to help developers find and fix code vulnerabilities.

GitHub Actions Security Roadmap 2026

GitHub Actions is bolstering its security posture with a 2026 roadmap focused on deterministic dependencies, policy controls, and enhanced runner security.

GitHub Bolsters App Security with AI

GitHub integrates AI-powered detections to enhance application security coverage across diverse languages and frameworks, surfacing vulnerabilities and fixes in pull requests.

GitHub Boosts Open Source Security

GitHub commits $5.5M to its Secure Open Source Fund and joins a multi-million dollar initiative to support open source maintainers and bolster software supply chain security.

IBM Experts Detail AI Agent Security Imperatives

IBM security leaders Bob Kalka and Tyler Lynch discuss critical security imperatives for AI agents, focusing on accountability, privilege management, and observability.

GitHub Copilot Agent Gets Smarter

GitHub Copilot coding agent receives major updates, including model selection, self-review, integrated security scanning, custom agents, and CLI handoff, significantly enhancing its automation and code quality capabilities.

Dazz Acquired by Wiz for $450M

<p>Wiz acquires Dazz for $450M, expanding its cybersecurity platform's cloud security reach.</p><p>The deal values Dazz at $450 million, a mix of cash and shares, enhancing Wiz's services and market coverage.</p>

C2A Security Brings Generative AI to its DevSecOps Platform

Snyk Acquires Enso Security for Application Security Posture Management (ASPM)

OX Security Releases LLM AppSec with ChatGPT Integration, OX-GPT