Join us

ContentUpdates and recent posts about JFrog Xray..
Link
@kaptain shared a link, 3 days, 17 hours ago
FAUN.dev()

Kubernetes Was Overkill. We Moved to Docker Compose and Saved 60 Hours.

A small team rolled back their Kubernetes move after six months in the weeds. The setup tanked productivity, bloated infra costs, and turned simple deploys into a slog. They ditched it, brought back Docker Compose, and chopped deploy time from 45 minutes to 4. That one change freed up 60+ engineerin.. read more  

Link
@kala shared a link, 3 days, 17 hours ago
FAUN.dev()

8 plots that explain the state of open models

Starting 2026, Chinese companies are dominating the open AI model scene, with Qwen leading in adoption metrics. Despite the rise of new entrants like Z.ai, MiniMax, Kimi Moonshot, and others, Qwen's position seems secure. DeepSeek's large models are showing potential to compete with Qwen, but the Ch.. read more  

Link
@kala shared a link, 3 days, 17 hours ago
FAUN.dev()

Build an AI-powered website assistant with Amazon Bedrock

AWS spun up a serverless RAG-based support assistant usingAmazon BedrockandBedrock Knowledge Bases. It pulls in docs via a web crawler and S3, then stuffs embeddings intoAmazon OpenSearch Serverless. Access is role-aware, locked down withCognito. Everything spins up clean withAWS CDK... read more  

Build an AI-powered website assistant with Amazon Bedrock
Link
@kala shared a link, 3 days, 17 hours ago
FAUN.dev()

Towards Generalizable and Efficient Large-Scale Generative Recommenders

Authors discuss their approach to scaling generative recommendation models from O(1M) to O(1B) parameters for Netflix tasks, improving training stability, computational efficiency, and evaluation methodology. They address challenges in alignment, cold-start adaptation, and deployment, proposing syst.. read more  

Link
@kala shared a link, 3 days, 17 hours ago
FAUN.dev()

Where good ideas come from (for coding agents)

A new way to build agents treats prompting ascontext navigation, steering the LLM through ideas like a pilot, not tossing it prompts and hoping for magic. It maps neatly onto Steven Johnson’s seven patterns of innovation. For coding agents to actually pull their weight, users need to bring more than.. read more  

Link
@kala shared a link, 3 days, 17 hours ago
FAUN.dev()

Agentic AI, MCP, and spec-driven development: Top blog posts of 2025

AI speeds up dev - but it’s a double-edged keyboard. It sneaks in subtle bugs and brittle logic that break under pressure. To keep things sane, teams are fighting back withguardrail patterns,AI-aware linters, andtest suites hardened for hallucinated code... read more  

Link
@devopslinks shared a link, 3 days, 17 hours ago
FAUN.dev()

Cloud Workload Threats - Runtime Attacks in 2026

Cloud-native breaches keep slipping through the cracks, not because no one’s watching, but because they’re watching the wrong things. Static checks and posture tools can’t catch what happens in motion. That’s where most attacks live now: at runtime. Think app-layer exploits, poisoned dependencies, s.. read more  

Link
@devopslinks shared a link, 3 days, 17 hours ago
FAUN.dev()

Weaponizing the AWS CLI for Persistence

Researchers pulled off a slick persistence trick usingAWS CLI aliases. They chained dynamic alias renaming with command execution to swipe credentials, without breaking expected CLI behavior. No red flags. Perfect fit forautomated environmentslike CI/CD pipelines. Backdoors, no AWS CLI tampering req.. read more  

Weaponizing the AWS CLI for Persistence
Link
@devopslinks shared a link, 3 days, 17 hours ago
FAUN.dev()

21 Lessons From 14 Years at Google

A seasoned Google engineer drops 21 sharp principles for scaling engineering beyond just writing code. Think:clarity beats cleverness,users over egos,alignment over being “right.”The core message? Build systems humans can work with - especially under stress. Favorites: kill pointless work, treat pro.. read more  

21 Lessons From 14 Years at Google
Link
@devopslinks shared a link, 3 days, 17 hours ago
FAUN.dev()

Terraform governing with OPA

When managing infrastructure with Terraform, enforcing tagging standards, instance type restrictions, preventing public exposure, enforcing regions, and other best practices are essential with Open Policy Agent (OPA). OPA evaluates Terraform plans before apply to ensure compliance with organization'.. read more  

JFrog Xray is an enterprise-grade Software Composition Analysis (SCA) and security platform built to work deeply with JFrog Artifactory. It analyzes binaries, dependencies, and container images to detect vulnerabilities, license issues, and policy violations across the entire software supply chain. Xray performs recursive scanning, meaning it inspects every layer and transitive dependency of an artifact. It integrates with CI/CD pipelines, IDEs, and developer workflows to block risky components before they reach production. Large organizations use Xray to enforce governance, accelerate secure release cycles, and maintain continuous visibility into their artifacts from build to deployment.