Alan Shimel

Balaji Raghavan, chief technology officer at Postman, breaks down key findings from the company’s 7th Annual State of the API Report — offering an inside Balaji Raghavan, chief technology officer at Postman, breaks down key findings from the company’s 7th Annual State of the API Report.

Every year, the DevOps Dozen tells a story about where our industry is headed. When we look at the finalists, we see innovators who lift communities,

Amy Carrillo Cotten shares her perspective on how DevOps teams are evolving in an era defined by AI acceleration, rapid release cycles, and shifting Amy Carrillo Cotten shares her perspective on how DevOps teams are evolving in an era defined by AI acceleration.

At swampUP 2025 in Napa Valley, Alan sat down with Vishal Raina and Shibashis Mishra to discuss how DevOps is adapting to a new era defined by artificial Alan sat down with Vishal Raina and Shibashis Mishra to discuss how DevOps is adapting to a new era defined by artificial intelligence and automation.

The Shai-Hulud worm hit npm, GitHub, and CI/CD pipelines, exposing critical DevOps supply chain risks. Here’s what it means for pipeline security.

The 2025 DORA Report argues that AI functions is an amplifier of existing strengths and weaknesses rather than as a silver-bullet tool.

At swampUP 2025 in Napa Valley, JFrog co-founder and CTO Yoav Landman joined Alan to reflect on the company’s latest announcements and the broader At swampUP 2025 in Napa Valley, JFrog co-founder and CTO Yoav Landman joined Alan Shimel to reflect on the company’s latest announcements.

Named after Dune’s legendary sandworms, the Shai-Hulud attack marks the third major NPM incident in recent memory — and one of the most dangerous.Attackers compromised multiple packages, some impersonating CrowdStrike modules, to spread a self-replicating worm aimed at stealing credentials.This incident underscores a growing reality:Software supply chains are a prime target.Trust must be backed by verification.SBOMs, signed publishing, MFA, and audits are becoming baseline requirements.Get the full analysis and expert commentary here 👉 [link]#DevOps #DevSecOps #SupplyChainSecurity

Alan urges DevOps platform engineers to design for tooling failure and rethink vendor trust to prevent fragile foundations from collapsing.

At JFrog’s SwampUP 2025, governance and compliance took center stage—positioning DevGovOps as essential for responsible AI adoption.