USA / Canada 866-503-1471
International +31 85 064 4633
LiteLLM is a practical way to add AI capabilities to Git-based automation without locking yourself into a single model provider. For teams using GitHub or GitLab, it can sit in the middle as a unified AI gateway for code review, commit assistance, merge request analysis, and CI-driven automations. That makes it especially useful when you […]
GitLab 19 was recently released and we’ve made two unique lists of GitLab features: all features and what’s new
Recently, there have been many changes in Sonar and new tools have been added – so we thought we’d take a moment to clear things up and explain what the current SonarQube offering is, as well as what our added value is as their representatives (and of additional development utility tools). We are writing briefly here about each existing product/solution, and I would be happy to elaborate further as needed. 1) SonarQube Server – The long-standing and well-known product: Static code analysis to improve code quality and enhance security […]
Milestone is an engineering intelligence platform focused on turning real development activity into a system of record for GenAI adoption, productivity, and code quality, rather than just counting seats or tokens. It connects to your repos and tooling, attributes which code was AI-assisted, and then exposes that through product areas like Vibe Metrics, GenAI Adoption […]
In this article we go one level deeper and explain the main capabilities of the LiteLLM AI Gateway:cost tracking, batches API, guardrails, model access, budgets, LLM observability, rate limiting, prompt management, S3 logging and pass-through endpoints – and why DevOps / Platform / Architecture teams care about them. As we recently shared, We (ALM Toolbox) […]
Sonar announced this week the acquisition of Gitar.AI, which developed an AI-based Code Review and code fixing tool. In this article, a short overview of Gitar.
GitLab is rapidly adding AI features such as GitLab Duo, AI Gateway and AI‑powered CI/CD flows, but many organizations still struggle with fragmented model usage, unclear costs and compliance concerns. LiteLLM can act as the missing “AI gateway” layer for GitLab, giving you a single place to standardize LLM access, enforce security and track spend […]
We are pleased to announce that as part of our AI, DevOps, and DevSecOps solutions, we now also offer LiteLLM’s AI Gateway solution.
An explanation of code coverage in SonarQube: how to measure Coverage correctly, integrate coverage reports with code management tools, define smart Quality Gates, and improve code quality.
GitLab custom roles help teams control access to code, settings, tokens, and webhook administration without promoting every advanced user to Maintainer or Owner. The key is understanding where custom roles help, where token scopes still matter, and how both shape access to data through the GitLab API and GitLab webhooks
The Future of Multi-Domain Secure Operations Mattermost has officially expanded its Intelligent Mission Environment with the launch of Mattermost Enterprise Advanced. This new product tier is specifically designed to meet the rigorous security and resilience requirements of multi-domain operations, joining the existing Mattermost Professional and Enterprise lines. Enterprise Advanced offers a comprehensive messaging and collaboration […]
In the wake of the PyPI LiteLLM supply chain attack that backdoored packages to steal Kubernetes credentials, SonarQube emerges as DevSecOps shield. Discover how Sonar scans dependencies- complete with GitHub Actions and GitLab CI/CD.
In the wake of the PyPI LiteLLM supply chain attack that backdoored packages to steal Kubernetes credentials, JFrog emerges as DevSecOps shield. Discover how Artifactory proxies, Curation blocks malicious deps, and Xray scans binaries – complete with GitLab CI/CD and Azure DevOps.
Using GitLab as your end‑to‑end DevOps platform helps you prevent supply‑chain attacks (like the recent PyPI litellm compromise) and block malware from entering your environment by enforcing controls directly in the CI/CD pipeline, dependency flow, and identity layer. Below is how that maps to your concrete threat model. Note: Implementing these practices requires a GitLab […]
Socket.dev prevents supply chain attacks by scanning dependencies for malware signatures, obfuscated code, and suspicious behaviors like data exfiltration or unauthorized API calls in JS, Python, and Go packages. Integrated into GitHub, GitLab, and Jenkins CI/CD pipelines, it blocks threats at the PR stage without uploading source code, complementing tools like SonarQube in DevSecOps workflows.
