TLDR DevOps 2025-12-08

Don't wait for a runtime alert to fix a build-time mistake.

Finding a security hole in production triggers a fire drill. Finding it in your Terraform is a five-minute fix.

Tenable Cloud Security scans your IaC – including Terraform, CloudFormation, and ARM – to catch identity sprawl and bad configs at the source.

Connect build-time checks to runtime protection, so you can prevent drift, automate policy enforcement, and avoid the war room Zoom calls at ungodly hours.

Production is the wrong place to debug security.

Get full traceability across the SDLC

AWS Lambda durable functions let developers write sequential, long-running workflows with automatic checkpoints, retries, and year-long waits without paying for idle compute. Using an open source SDK, they simplify state management for complex processes like approvals while preserving the standard Lambda programming model.

Cloudflare experienced a 25-minute network outage on December 5 that impacted approximately 28% of its HTTP traffic. It was caused by a configuration change designed to disable a WAF testing tool. This action inadvertently exposed a long-undetected bug in its FL1 proxy's rules module, leading to HTTP 500 errors. This marks the company's second major incident in weeks.

AWS Lambda Managed Instances let Lambda functions run on EC2 with full serverless simplicity while enabling specialized hardware, multiconcurrency, and EC2 pricing benefits. The feature reduces costs, removes infrastructure management, supports major runtimes, and allows easy migration for thread-safe workloads.

Estimates are essential for product owners to prioritize and plan releases, but developers dislike them because they're inherently uncertain and often get misused as commitments or deadlines. The real problem isn't estimating itself — it's the unrealistic expectations and pressure created when tentative estimates are treated as promises.

Cloudflare Workers recently gained support for exporting OpenTelemetry logs and traces directly to Grafana Cloud. This new integration offers users pre-built dashboards to visualize critical metrics, including request counts, latency, and geographic data, without requiring agent installation.

Discover why Atlassian received 5/5 ratings across Forrester's Vision, Innovation, and Roadmap criteria. Hint: it's not simply great tooling. With Atlassian, Dev, business, and IT teams are empowered to respond to change on-the-fly, resolving incidents faster while managing risk. Read the report

data-peek is a minimal and fast SQL client desktop application that features AI-powered querying. It allows developers to quickly access data without bloat. data-peek supports PostgreSQL, MySQL, and Microsoft SQL Server.

VERT is a new open-source file conversion utility that performs fully local conversions on-device using WebAssembly. It distinguishes itself from cloud-based alternatives by prioritizing user privacy.

React2Shell (CVE-2025-55182) is a critical unauthenticated remote code execution (RCE) vulnerability with a CVSS score of 10.0 in React Server Components (RSCs) that also impacts Next.js. It allows malicious code execution via a single crafted HTTP request with 100% exploitation success against default configurations.

Python is a more portable, readable, and reliable choice than Bash for anything beyond simple scripting. It works consistently across systems and has a rich standard library. While Bash is fine for small tasks, Python avoids obscure syntax pitfalls and OS-specific behavior that often make shell scripts fragile and hard to maintain.

GenAI is rewriting your codebase faster than your devs can review it. Codacy's new AI Reviewer pairs deterministic static analysis with context-aware code reviews that catch issues missed by legacy scanners. See how it works

Akamai has acquired Fermyon to expand its serverless Wasm capabilities.

The Grafana Image Renderer v5.0 release is a complete rewrite of the service that significantly enhances performance, reliability, and security.

Amazon CloudWatch now offers AI-powered incident report generation that guides users through a chat-based Five Why's analysis to identify root causes.