Open source and AI have transformed the way software is built, enabling teams to innovate faster by leveraging shared knowledge and reusable components. However, every dependency included in an application becomes part of its security posture. craigrisi.com/post/managing-…

By embedding security checks directly into the delivery pipeline, teams can detect vulnerabilities earlier, automate critical safeguards, and maintain confidence in the software they release. craigrisi.com/post/devsecops…

With the rapid rise of AI agents and the emergence of increasingly powerful models, it feels timely to revisit the topic of software security. And it all starts with the engineer. craigrisi.com/post/secure-co…

Everyone is using AI today. But how can companies track AI usage to ensure it is done safely and effectively? craigrisi.com/post/measuring…

At its core, great software is created by healthy teams operating within healthy systems. craigrisi.com/post/engineeri…

In software delivery, speed and quality mean little if outcomes are unpredictable. Leaders and stakeholders need to trust that when a team commits to a date, scope, or outcome, it will be delivered. craigrisi.com/post/predictab…

Reliability and recovery metrics measure the resilience of your delivery ecosystem. These metrics answer a critical question: When something goes wrong, how fast can we detect it, contain it, and restore service? craigrisi.com/post/reliabili…

Quality and stability metrics reveal how safe your delivery system is. They show whether fast changes are sustainable or whether they are silently accumulating risk that will eventually surface as defects, outages, and lost confidence. craigrisi.com/post/quality-a…

We want to build software quickly. But to do so, we need to understand the flow of our software delivery. craigrisi.com/post/measuring…