CI/CD

GitLab 19.2: Agentic DevSecOps Tackles the AI Code Backlog

GitLab 19.2: Agentic DevSecOps Tackles the AI Code Backlog

GitLab 19.2 introduces agentic automation designed to clear the review and security backlog that AI-generated code creates. Key features include Dependency Scanning Auto-Remediation, Security Review Flow, and Custom Flows, all governed by native audit trails and approval gates. ECI Research data shows why this architectural bet aligns with where enterprise engineering pain actually sits.

GitLab 19.2: Agentic DevSecOps Tackles the AI Code Backlog Read More »

AI Code Visibility Gap Widens as Production Use Hits 44.7%

AI Code Visibility Gap Widens as Production Use Hits 44.7%

Flux’s AI Code Generation Reality Check finds nearly half of organizations are running AI-generated code in production, while 35% can’t ship it confidently due to inadequate visibility. ECI Research examines the governance and tooling gaps this creates, and what engineering leaders should do next.

AI Code Visibility Gap Widens as Production Use Hits 44.7% Read More »

Lightrun Runtime PR Verifier: Catch Production Bugs Before Merge

Lightrun Runtime PR Verifier: Catch Production Bugs Before Merge

Lightrun has launched the first PR review tool that simulates proposed code changes against a live production environment before merge. The Runtime Aware PR Verifier assigns each pull request a risk score based on real traffic, execution paths, and dependency interactions. As AI coding agents accelerate PR volume, this closes the validation gap that static analysis and test suites cannot reach.

Lightrun Runtime PR Verifier: Catch Production Bugs Before Merge Read More »

AI Code Governance: GitLab Report Reveals a Control Crisis

AI Code Governance: GitLab Report Reveals a Control Crisis

GitLab’s AI Accountability Report surveyed 1,528 developers and technology buyers and found that AI code generation has outpaced the controls needed to manage it. Eighty percent of organizations adopted AI coding tools before building governance policies, and 43% cannot reliably distinguish AI-generated code from human-written code in their own codebase. The accountability phase of AI-assisted development has arrived, and most enterprises are not ready.

AI Code Governance: GitLab Report Reveals a Control Crisis Read More »

AWS Agentic AI Platform: Bedrock Agent Core, Q, and More

AWS Agentic AI Platform: Bedrock Agent Core, Q, and More

AWS announced a sweeping set of agentic AI capabilities at its New York event, including the general availability of Bedrock Agent Core Harness, a new managed knowledge graph service called AWS Context, and a Release Agent inside AWS DevOps Agent. ECI Research examines what the announcements mean for enterprise IT buyers and developers navigating the prototype-to-production gap.

AWS Agentic AI Platform: Bedrock Agent Core, Q, and More Read More »

LocalStack Blueprint Brings AI Agents to Local Cloud Testing

LocalStack Blueprint Brings AI Agents to Local Cloud Testing

LocalStack has released a blueprint enabling AI agents to provision and test cloud applications inside a local container rather than against live cloud infrastructure. The move directly addresses the infrastructure friction created by agentic code generation at scale. ECI Research analyst commentary explains what this means for ITDMs managing cloud costs and developers building agentic CI/CD pipelines.

LocalStack Blueprint Brings AI Agents to Local Cloud Testing Read More »

GitLab 19.0: Agentic DevSecOps and the AI Paradox

GitLab 19.0: Agentic DevSecOps and the AI Paradox

GitLab 19.0 addresses the AI Paradox: code generation has accelerated, but credential governance, merge workflows, and pipeline security have not kept pace. The release embeds agentic capabilities and unified secrets management directly into the platform where teams already work. ECI Research breaks down what this means for ITDMs and developers evaluating DevSecOps platform consolidation.

GitLab 19.0: Agentic DevSecOps and the AI Paradox Read More »

Spegel Argues Artifact Distribution Belongs Closer to the Cluster

Spegel Argues Artifact Distribution Belongs Closer to the Cluster

Spegel is making the case that Kubernetes performance is increasingly constrained by artifact distribution, not just builds or registries. At KubeCon EU 2026, the project outlined a peer-to-peer approach aimed at improving speed, cost efficiency, and reliability.

Spegel Argues Artifact Distribution Belongs Closer to the Cluster Read More »