DevOps Pulse
LATEST

Microsoft expanded its partnership with Veeam through equity investment and AI integration

while GitHub enhanced secret scanning with 28 new patterns and push protection across 39 token types. Multiple Veeam critical vulnerabilities (CVSS 9.9 RCE) expose backup infrastructure to compromise, creating urgent patching requirements that attackers will exploit. Reddit communities report widespread GitHub repository deletion incidents with no recovery beyond 90 days, highlighting shared responsibility gaps that create backup demand. The PM team should accelerate competitive response to GitProtect's expanding DevOps coverage while addressing security vulnerabilities that undermine customer confidence.

Signals
33
Sections
5/5
Threats
8
Fresh
14
Updated
92d ago
Show

DevOps Platform Updates

scanned 92d ago7

Latest announcements and changes from GitHub, GitLab, Azure DevOps, Bitbucket, and Atlassian.

GitHub Secret Scanning Adds 28 New Patterns with Push Protection

GitHub expanded secret scanning with 28 new detectors across 15 providers including Vercel, Supabase, Snowflake, and Figma. Push protection now covers 39 token types, and extended metadata features provide owner names, emails, and expiration timestamps for better security governance in DevOps environments.

githubBuildMVP Fast·10 MarRecent

Azure DevOps Adds Standalone GitHub Security Products

Microsoft introduced GitHub Secret Protection and GitHub Code Security as standalone products in Azure DevOps, providing secret scanning, push protection, dependency scanning, and code scanning capabilities. This unbundles GitHub Advanced Security into targeted offerings for enterprise DevOps protection.

azure-devopsMicrosoft Learn·25 MarNEW

GitLab AI-Powered False Positive Detection for Secret Scanning

GitLab introduced AI-powered false positive detection that analyzes secret detection findings before developers see them, identifying test credentials and placeholder secrets with confidence scores. This reduces security team triage time and improves DevSecOps workflow efficiency.

gitlabGitLab Releases·28 MarNEW

Atlassian Jira and Confluence Critical Security Vulnerabilities

Atlassian disclosed multiple high-severity vulnerabilities affecting Jira Data Center and Server, including path traversal, file overwrite, and denial of service flaws. These vulnerabilities could allow command execution and data disclosure to unauthorized users.

jiraUC Berkeley Information Security Office·17 Mar

Bitbucket Pipelines Kata Container Migration for Enhanced Security

Bitbucket began rolling out migration from Docker & Containerd to Kata Container lightweight virtual machines for Standard and Premium customers, providing increased isolation and security for DevOps workloads. The change enhances pipeline security posture.

bitbucketAtlassian Support·1 Mar

Microsoft Defender for Cloud GitHub Security Integration

Microsoft announced end-to-end DevSecOps integration between Defender for Cloud and GitHub Advanced Security, providing shift-left and shield-right security across code-to-cloud workflows. This convergence targets enterprise DevOps data protection strategies.

githubAzure Garage·24 MarRecent

Bitbucket Native Packages Authentication Removes Token Risk

Bitbucket introduced native authentication for Bitbucket Packages container registry using short-lived, auto-expiring tokens instead of personal API tokens. This eliminates long-lived credential exposure risks in CI/CD pipelines and enhances DevOps security posture.

bitbucketAtlassian Blog·26 MarNEW