Golden Paths for AI Agents: What Platform Engineering Gets Wrong When the User Isn't Human
Datadog's framework for redesigning golden paths when AI agents replace human developers as platform users — deterministic enforcement, machine-readable contracts, and audit co-authorship.
Golden Paths for AI Agents: Redesigning Platform Workflows for Non-Human Users
Agents are now platform users. Datadog maps three required changes: execution patterns, deterministic controls, and dispatch authorization before agent runs.
Coding Agents Are Pulling Packages Your Security Team Can't See
AI coding agents like Cursor and Claude Code bypass traditional package governance by pulling dependencies directly from public registries. JFrog's agent package resolution closes that gap before the next supply chain incident.
Agent Immunization: The Software Supply Chain Security Model Built for AI Speed
JFrog's agent immunization framework embeds trust enforcement inside what AI agents consume—not at the perimeter—because perimeter security cannot keep pace with agentic development velocity.
JFrog Fly Graduates: What an Agentic Repository Actually Means for Enterprise CI/CD
JFrog Fly's agentic repository capabilities are now part of the main JFrog Platform. The experiment is over. The question now is what enterprise teams do with it.
How Bedrock AgentCore Propagates User Identity to JFrog Artifactory — and Why It Matters
When an AI agent calls a tool on behalf of a user, who gets the audit trail? Bedrock AgentCore's On-Behalf-Of token exchange solves the shared-credential problem that makes agent-to-Artifactory calls untrustworthy.
Datadog Risk AI: How Systemic Risk Detection Moves Beyond Individual Findings
Datadog's Risk Engineering team built an AI agent layer that correlates security signals across vulnerability, identity, and exposure dimensions — recognizing that severity and risk aren't the same thing.
MCP vs API: CircleCI's Practical Guide to When Each Makes Sense
CircleCI's engineering blog clarifies the actual distinction between APIs and MCP — and why the answer for most agentic systems is 'both, for different purposes.'
How Datadog Scaled Git Serving 20x Without Slowing CI Down
Datadog's GitRetriever sustains 20× CI traffic growth at 40ms median latency — a two-tier mirror/relay architecture for monorepo CI that any platform team can adapt.
How to Trace AWS Lambda Durable Functions with Datadog
Datadog's Node.js and Python tracers now instrument AWS Lambda Durable Functions automatically — connecting multi-invocation workflows into a single unified flame graph without code changes.
Datadog Work Management: One Queue for Humans and AI Agents
Datadog's renamed Work Management platform centralizes human and AI agent task tracking with full observability context attached. Here's what it solves that Jira and Slack threads don't.
AI Just Found a 27-Year-Old Vulnerability. Your AppSec Stack Wasn't Built for This Speed.
Claude Mythos Preview independently found and weaponized a 27-year-old OpenBSD flaw, a 16-year-old FFmpeg bug, and a 17-year-old FreeBSD RCE. JFrog's analysis explains why fragmented security tooling can't keep up.
Scale Your Platform Without Becoming the Bottleneck: The JFrog Projects Framework
Growing engineering orgs hit a wall when centralized platform admins become the constraint. JFrog Projects introduces delegated administration, project-scoped RBAC, and isolation by default — with a model that scales to 120,000+ repos.
Eleven Minutes, Zero Humans: How This Kubernetes Upgrade Pipeline Works
A production Kubernetes control plane upgraded across three nodes in 11 minutes without manual intervention. Here's the six-tool pipeline behind it, the critical concurrency mistake to avoid, and what self-healing actually requires.
Packer v1.16.0 Brings SLSA Provenance to Machine Images — Here's What That Means
HashiCorp's Packer v1.16.0 adds native SLSA provenance generation and verification to machine image builds. The result: cryptographically signed build records, four signing modes, and packer verify-attestation for enforcement pipelines.
Datadog's Azure Integration No Longer Needs a Secret to Rotate
Secretless authentication replaces static client secrets with OIDC-based federated identity. No expiration dates, no rotation schedules, no telemetry gaps when someone forgets to update a credential.
JFrog Artifactory and GCP Artifact Registry: Native Pull, No Sync Required
JFrog's Artifact Registry Connector routes Cloud Run and GKE pulls directly to Artifactory in real time — eliminating sync lag, parallel registries, and policy enforcement gaps.
AGENTS.md vs. Skills: How to Actually Steer a Coding Agent
CircleCI's breakdown of when to use AGENTS.md versus modular skills for coding agents — and why the real problem isn't the format, it's measuring whether steering works at all.
Unfixed Kubernetes CVEs: What You Can and Can't Actually Detect
Four Kubernetes CVEs have been unfixed since 2020–2021 — not because they were overlooked, but because patching would break the platform. Here's how to know if your cluster is actually exposed.
When Zero Plus Zero Equals Two: Fixing Trace Fragmentation in Istio and Kiali
Combining Istio sidecar tracing with OpenTelemetry instrumentation produces duplicate, disconnected trace records — not unified observability. The fix is two configuration changes, and it closes the gap permanently.
Understanding Unfixed Kubernetes CVEs: What You Can — and Can't — Detect
Four Kubernetes CVEs remain unfixed because patching would break the platform. Datadog's guide to audit-log-based detection shows what each one exposes — and the honest limits of what audit logs can confirm.
HCP Terraform as the Control Plane for AI-Driven Infrastructure
HashiCorp's case for HCP Terraform as the governance layer for AI agents writing infrastructure code: provenance, policy gates, scoped identities, isolated workspaces, and audit trails agents can't bypass.
Agentic Dev Security Starts Before the Agent Writes Its First Line
JFrog's Ohad Shalev argues most agentic development security tools watch what agents build but miss what they consume before they start — and that gap is where the real attack surface lives.
SLSA and DevGovOps: Why Software Supply Chain Governance Now Runs at Machine Speed
AI agents generate code faster than human governance frameworks can review it. DevGovOps — continuous governance embedded in CI/CD — is the response, and SLSA provides the maturity model. Here's how JFrog's implementation works.