Best of DevSecOpsMarch 2026

  1. 1
    Article
    Avatar of freecodecampfreeCodeCamp·11w

    CI/CD in Production with Jenkins

    A 17-hour Jenkins course covering CI/CD from fundamentals to production-grade DevSecOps has been released on freeCodeCamp's YouTube channel. Topics include modern SDLC, CI/CD concepts, branching strategies, Jenkins basics and installation, freestyle jobs, pipelines, multibranch pipelines, Maven for DevOps, DevSecOps, and Jenkins shared libraries. A hands-on project builds and deploys a Dockerized Flask app.

  2. 2
    Article
    Avatar of gitlabGitLab·11w

    Navigate repositories faster with the file tree browser

    GitLab 18.9 introduces a collapsible, resizable file tree browser panel in the repository view, bringing an IDE-like navigation experience to the web interface. The panel stays visible alongside file and directory views, expands parent directories automatically when navigating to nested files, and syncs with the current location. Key features include keyboard-first navigation following the W3C ARIA treeview pattern, filename filtering via a global search dialog, responsive behavior across desktop and mobile viewports, and pagination support for large repositories. Available now on GitLab.com, Self-Managed, and Dedicated.

  3. 3
    Article
    Avatar of softwaretestingmagazineSoftware Testing Magazine·11w

    Scaling Your QA Strategy: Why Open Source Cross Browser Testing Tools are the Future of DevSecOps

    Engineering teams are shifting from expensive SaaS-based testing clouds to self-hosted, open source cross-browser testing setups running on Kubernetes or Docker. This approach eliminates per-minute billing, enables elastic scaling via Horizontal Pod Autoscalers, and aligns with DevSecOps principles by keeping test artifacts and credentials within the organization's perimeter. Infrastructure-as-Code tools like Terraform and Helm charts allow ephemeral, disposable test environments that support zero-trust security. CI/CD pipelines using GitHub Actions, GitLab CI, or Jenkins can trigger browser containers within the same network boundary, enabling security scanning and compliance checks inline. The cultural shift also improves developer experience by using familiar tools like kubectl and Docker CLI, shortening feedback loops and reducing dependency on vendor platforms.