Tracy Ragan, CEO DeployHub
@tracyragan.bsky.social
Tracy is a recognized authority in software supply chain security and DevSecOps, with expertise in managing complex, decoupled architectures. She serves on the OpenSSF Governing Board and the Technology Oversight Committee.
A lesson learned from the researchers at Wiz. {(urn:li:organization:10866176)[Techstrong Group]} - https://cstu.io/61b11c
Massive VS Code Secrets Leak Puts Focus on Extensions, AI: Wiz - DevOps.com
If discovered by bad actors, the leaks could have led to a significant supply chain compromise, the Wiz researchers wrote.
cstu.io
October 28, 2025 at 7:03 PM
A lesson learned from the researchers at Wiz. {(urn:li:organization:10866176)[Techstrong Group]} - https://cstu.io/61b11c
Hey - DevOpsExperience 2025 is now available on Demand - Some great presentations to see. Mine was on CICD Cybersecurity and the new Guide for evolving your #DevOps pipeline to #DevSecOps - go for it. {(urn:li:organization:80162084)[Techstrong Learning]} https://cstu.io/581dc1
Sign In: DevOps Experience 2025
cstu.io
October 23, 2025 at 2:27 PM
Hey - DevOpsExperience 2025 is now available on Demand - Some great presentations to see. Mine was on CICD Cybersecurity and the new Guide for evolving your #DevOps pipeline to #DevSecOps - go for it. {(urn:li:organization:80162084)[Techstrong Learning]} https://cstu.io/581dc1
Building an MCP server is getting easier with full support in ChatGPT Developer Mode. https://cstu.io/5bd4e6
OpenAI Adds Full MCP Support to ChatGPT Developer Mode
OpenAI has rolled out full Model Context Protocol (MCP) support in ChatGPT, bringing developers a long-requested feature: the ability to use custom connectors for both read and write actions directly inside chats. The feature, now in beta u...
cstu.io
October 21, 2025 at 4:42 PM
Building an MCP server is getting easier with full support in ChatGPT Developer Mode. https://cstu.io/5bd4e6
Hey #Cybersecurity Pros - want to get involved in #CICDCybersecurity? The {(urn:li:organization:19100461)[Continuous Delivery Foundation]} SIG will be participating in #Hactoberfest. You can contribute to the open-source tooling guide for Hactoberfest PRs. https://cstu.io/6b71a9
Hack our CI/CD Cybersecurity Guide - CD Foundation
Contribute to our Cybersecurity Guide for Hacktoberfest this October 2025!
cstu.io
October 7, 2025 at 2:47 PM
Hey #Cybersecurity Pros - want to get involved in #CICDCybersecurity? The {(urn:li:organization:19100461)[Continuous Delivery Foundation]} SIG will be participating in #Hactoberfest. You can contribute to the open-source tooling guide for Hactoberfest PRs. https://cstu.io/6b71a9
Hey - DevOpsExperience 2025 is now available on Demand - Some great presentations to see. Mine was on CICD Cybersecurity and the new Guide for evolving your #DevOps pipeline to #DevSecOps - go for it. {(urn:li:organization:80162084)[Techstrong Learning]} https://cstu.io/581dc1
Sign In: DevOps Experience 2025
cstu.io
October 6, 2025 at 5:27 PM
Hey - DevOpsExperience 2025 is now available on Demand - Some great presentations to see. Mine was on CICD Cybersecurity and the new Guide for evolving your #DevOps pipeline to #DevSecOps - go for it. {(urn:li:organization:80162084)[Techstrong Learning]} https://cstu.io/581dc1
Hey @Jenkins community - don't let post-deployment CVEs linger in production. DeployHub can be integrated into your pipeline to help you find and fix CVEs post-deployment fast. https://cstu.io/34089e
Jenkins Vulnerability Management
Platform Use Cases Jenkins and Post-Deployment CVE Visibility DeployHub Pro supercharges Jenkins pipelines with real-time security intelligence, enabling lightning-fast vulnerability remediation before attackers can strike. Request a Demo I...
cstu.io
October 1, 2025 at 4:07 PM
Hey @Jenkins community - don't let post-deployment CVEs linger in production. DeployHub can be integrated into your pipeline to help you find and fix CVEs post-deployment fast. https://cstu.io/34089e
Hey - DevOpsExperience 2025 is now available on Demand - Some great presentations to see. Mine was on CICD Cybersecurity and the new Guide for evolving your #DevOps pipeline to #DevSecOps - go for it. {(urn:li:organization:80162084)[Techstrong Learning]} https://cstu.io/581dc1
Sign In: DevOps Experience 2025
cstu.io
September 29, 2025 at 3:25 PM
Hey - DevOpsExperience 2025 is now available on Demand - Some great presentations to see. Mine was on CICD Cybersecurity and the new Guide for evolving your #DevOps pipeline to #DevSecOps - go for it. {(urn:li:organization:80162084)[Techstrong Learning]} https://cstu.io/581dc1
Understand what it means, and how to manage #postdeployment #CVEs -don't let them linger in production environments. Use the DeployHub evidence store to do continuous CVE scanning against a digital twin. #softwaresupplychian #devsecops https://cstu.io/d0becf#
Intro to DeployHub
Learn about Continuous Vulnerability Management and how DeployHub Pro uses SBOM and Deployment data to detect new vulnerabilities across all assets in your infrastructure from code to cloud.
cstu.io
September 26, 2025 at 8:25 PM
Understand what it means, and how to manage #postdeployment #CVEs -don't let them linger in production environments. Use the DeployHub evidence store to do continuous CVE scanning against a digital twin. #softwaresupplychian #devsecops https://cstu.io/d0becf#
The question is, "is #AI really making us more productive?" Well, for me I love using it as an editor. But for coding, the jury is out. https://cstu.io/bbb0a6
September 23, 2025 at 4:20 PM
The question is, "is #AI really making us more productive?" Well, for me I love using it as an editor. But for coding, the jury is out. https://cstu.io/bbb0a6
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
DevOps Experience 2025
Now in its 10th year, DevOps Experience returns on September 25, 2025, to celebrate a decade of transformation, innovation, and community. This year’s theme, “DevOps Goes Native,” highlights DevOps’ essential role in the rise of Cloud Native, NativeDev, AI NativeDev, and platform engineering—marking both a return to DevOps’ foundational principles and a look forward to its next evolution. As DevOps becomes truly native to the application development and deployment lifecycle, this event explores how the discipline has matured. While tools, practices, and priorities have evolved, DevOps remains the bedrock of modern AppDev and AppSec efforts. Today, DevOps is not a siloed practice—it is organic, embedded, and essential to every phase of delivering secure, reliable, and scalable software. Join us for a day of inspiring keynotes, in-depth technical sessions, and real-world case studies from leading voices across the DevOps community. Learn from AI NativeDev pioneers, Cloud Native practitioners, DevSecOps innovators, and...
bit.ly
September 22, 2025 at 8:31 PM
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
Hey @Jenkins community - don't let post-deployment CVEs linger in production. DeployHub can be integrated into your pipeline to help you find and fix CVEs post-deployment fast. https://cstu.io/34089e
Jenkins Vulnerability Management
Platform Use Cases Jenkins and Post-Deployment CVE Visibility DeployHub Pro supercharges Jenkins pipelines with real-time security intelligence, enabling lightning-fast vulnerability remediation before attackers can strike. Request a Demo I...
cstu.io
September 19, 2025 at 7:07 PM
Hey @Jenkins community - don't let post-deployment CVEs linger in production. DeployHub can be integrated into your pipeline to help you find and fix CVEs post-deployment fast. https://cstu.io/34089e
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
DevOps Experience 2025
Now in its 10th year, DevOps Experience returns on September 25, 2025, to celebrate a decade of transformation, innovation, and community. This year’s theme, “DevOps Goes Native,” highlights DevOps’ essential role in the rise of Cloud Native, NativeDev, AI NativeDev, and platform engineering—marking both a return to DevOps’ foundational principles and a look forward to its next evolution. As DevOps becomes truly native to the application development and deployment lifecycle, this event explores how the discipline has matured. While tools, practices, and priorities have evolved, DevOps remains the bedrock of modern AppDev and AppSec efforts. Today, DevOps is not a siloed practice—it is organic, embedded, and essential to every phase of delivering secure, reliable, and scalable software. Join us for a day of inspiring keynotes, in-depth technical sessions, and real-world case studies from leading voices across the DevOps community. Learn from AI NativeDev pioneers, Cloud Native practitioners, DevSecOps innovators, and...
bit.ly
September 18, 2025 at 7:31 PM
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
Understand what it means, and how to manage #postdeployment #CVEs -don't let them linger in production environments. Use the DeployHub evidence store to do continuous CVE scanning against a digital twin. #softwaresupplychian #devsecops https://cstu.io/d0becf#
Intro to DeployHub
Learn about Continuous Vulnerability Management and how DeployHub Pro uses SBOM and Deployment data to detect new vulnerabilities across all assets in your infrastructure from code to cloud.
cstu.io
September 15, 2025 at 7:11 PM
Understand what it means, and how to manage #postdeployment #CVEs -don't let them linger in production environments. Use the DeployHub evidence store to do continuous CVE scanning against a digital twin. #softwaresupplychian #devsecops https://cstu.io/d0becf#
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
DevOps Experience 2025
Now in its 10th year, DevOps Experience returns on September 25, 2025, to celebrate a decade of transformation, innovation, and community. This year’s theme, “DevOps Goes Native,” highlights DevOps’ essential role in the rise of Cloud Native, NativeDev, AI NativeDev, and platform engineering—marking both a return to DevOps’ foundational principles and a look forward to its next evolution. As DevOps becomes truly native to the application development and deployment lifecycle, this event explores how the discipline has matured. While tools, practices, and priorities have evolved, DevOps remains the bedrock of modern AppDev and AppSec efforts. Today, DevOps is not a siloed practice—it is organic, embedded, and essential to every phase of delivering secure, reliable, and scalable software. Join us for a day of inspiring keynotes, in-depth technical sessions, and real-world case studies from leading voices across the DevOps community. Learn from AI NativeDev pioneers, Cloud Native practitioners, DevSecOps innovators, and...
bit.ly
September 12, 2025 at 3:39 PM
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
Checkout @FastMCP, a standard framework for working with the Model Context Protocol. FastMCP 1.0 was incorporated into the official MCP Python SDK in 2024. https://cstu.io/a15233
GitHub - jlowin/fastmcp: 🚀 The fast, Pythonic way to build MCP servers and clients
🚀 The fast, Pythonic way to build MCP servers and clients - jlowin/fastmcp
cstu.io
September 11, 2025 at 3:36 PM
Checkout @FastMCP, a standard framework for working with the Model Context Protocol. FastMCP 1.0 was incorporated into the official MCP Python SDK in 2024. https://cstu.io/a15233
Understand what it means, and how to manage #postdeployment #CVEs -don't let them linger in production environments. Use the DeployHub evidence store to do continuous CVE scanning against a digital twin. #softwaresupplychian #devsecops https://cstu.io/d0becf#
Intro to DeployHub
Learn about Continuous Vulnerability Management and how DeployHub Pro uses SBOM and Deployment data to detect new vulnerabilities across all assets in your infrastructure from code to cloud.
cstu.io
September 10, 2025 at 2:13 PM
Understand what it means, and how to manage #postdeployment #CVEs -don't let them linger in production environments. Use the DeployHub evidence store to do continuous CVE scanning against a digital twin. #softwaresupplychian #devsecops https://cstu.io/d0becf#
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
DevOps Experience 2025
Now in its 10th year, DevOps Experience returns on September 25, 2025, to celebrate a decade of transformation, innovation, and community. This year’s theme, “DevOps Goes Native,” highlights DevOps’ essential role in the rise of Cloud Native, NativeDev, AI NativeDev, and platform engineering—marking both a return to DevOps’ foundational principles and a look forward to its next evolution. As DevOps becomes truly native to the application development and deployment lifecycle, this event explores how the discipline has matured. While tools, practices, and priorities have evolved, DevOps remains the bedrock of modern AppDev and AppSec efforts. Today, DevOps is not a siloed practice—it is organic, embedded, and essential to every phase of delivering secure, reliable, and scalable software. Join us for a day of inspiring keynotes, in-depth technical sessions, and real-world case studies from leading voices across the DevOps community. Learn from AI NativeDev pioneers, Cloud Native practitioners, DevSecOps innovators, and...
bit.ly
September 9, 2025 at 8:30 PM
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
Hey @Jenkins community - don't let post-deployment CVEs linger in production. DeployHub can be integrated into your pipeline to help you find and fix CVEs post-deployment fast. https://cstu.io/34089e
Jenkins Vulnerability Management
Platform Use Cases Jenkins and Post-Deployment CVE Visibility DeployHub Pro supercharges Jenkins pipelines with real-time security intelligence, enabling lightning-fast vulnerability remediation before attackers can strike. Request a Demo I...
cstu.io
September 4, 2025 at 3:03 PM
Hey @Jenkins community - don't let post-deployment CVEs linger in production. DeployHub can be integrated into your pipeline to help you find and fix CVEs post-deployment fast. https://cstu.io/34089e
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
DevOps Experience 2025
Now in its 10th year, DevOps Experience returns on September 25, 2025, to celebrate a decade of transformation, innovation, and community. This year’s theme, “DevOps Goes Native,” highlights DevOps’ essential role in the rise of Cloud Native, NativeDev, AI NativeDev, and platform engineering—marking both a return to DevOps’ foundational principles and a look forward to its next evolution. As DevOps becomes truly native to the application development and deployment lifecycle, this event explores how the discipline has matured. While tools, practices, and priorities have evolved, DevOps remains the bedrock of modern AppDev and AppSec efforts. Today, DevOps is not a siloed practice—it is organic, embedded, and essential to every phase of delivering secure, reliable, and scalable software. Join us for a day of inspiring keynotes, in-depth technical sessions, and real-world case studies from leading voices across the DevOps community. Learn from AI NativeDev pioneers, Cloud Native practitioners, DevSecOps innovators, and...
bit.ly
September 3, 2025 at 6:00 AM
The Secure Software Development Framework (#SSDF) is an important guideline, but how do you achieve the tasks? Join me as I introduce the CICD Cybersecurity Reference Guide, which identifies open-source tools to add to your #DevSecOps pipeline Register at https://bit.ly/4lJ61hC
On the topic of #MCP servers, check out this practical guide on how to use the {(urn:li:organization:1418841)[GitHub]} MCP server. https://github.blog/ai-and-ml/generative-ai/a-practical-guide-on-how-to-use-the-github-mcp-server/?utm_source=tldrdevops
September 2, 2025 at 4:32 PM
On the topic of #MCP servers, check out this practical guide on how to use the {(urn:li:organization:1418841)[GitHub]} MCP server. https://github.blog/ai-and-ml/generative-ai/a-practical-guide-on-how-to-use-the-github-mcp-server/?utm_source=tldrdevops
Emma Taylor takes on #MutationTesting at {(urn:li:organization:19100461)[Continuous Delivery Foundation]} CDCon2025 (yes we are related). Great job Emma. https://cstu.io/9c4f7a
Unleashing the Power of Mutation Testing: Supercharging Software Quality and Resilien... Emma Taylor
Don't miss out! Join us at the next Open Source Summit in Hyderabad, India (August 5); Amsterdam, Netherland (August 25-29); Seoul, South Korea (November 4-5). Join us at the premier vendor-neutral op...
cstu.io
August 1, 2025 at 4:10 PM
Emma Taylor takes on #MutationTesting at {(urn:li:organization:19100461)[Continuous Delivery Foundation]} CDCon2025 (yes we are related). Great job Emma. https://cstu.io/9c4f7a
Oops -NPM could break your build. https://cstu.io/1053ab
npm 'accidentally' removes Stylus package, breaks builds and pipelines
npm has taken down all versions of the Stylus library and replaced them with a "security holding" page, breaking pipelines and builds worldwide that rely on the package.
cstu.io
July 25, 2025 at 4:05 PM
Oops -NPM could break your build. https://cstu.io/1053ab
A big thank you to all who voted to give me two CDF contributor awards - Top Enthusiast and Top Documenter. Wow - I am honored. Here is the full list of winners this year. And a special congrats to Tony Carrato and Garima Bajpai as well. Well deserved. https://cstu.io/be04f7
July 24, 2025 at 5:10 PM
A big thank you to all who voted to give me two CDF contributor awards - Top Enthusiast and Top Documenter. Wow - I am honored. Here is the full list of winners this year. And a special congrats to Tony Carrato and Garima Bajpai as well. Well deserved. https://cstu.io/be04f7
The {(urn:li:organization:19100461)[Continuous Delivery Foundation]} Ambassadors talk about #Observability for AI-Native Software, a great panel. https://cstu.io/2e4fa9
Observability for AI-Native Software Panel
A panel discussion focused on the evolving landscape of observability in AI-native software systems. CDF Ambassadors explore the unique challenges and requirements that arise as artificial intelligenc...
cstu.io
July 23, 2025 at 4:20 PM
The {(urn:li:organization:19100461)[Continuous Delivery Foundation]} Ambassadors talk about #Observability for AI-Native Software, a great panel. https://cstu.io/2e4fa9
I've been talking about this for a while now. AI has taught us a new way to 'shop.' Notes on getting noticed outside of Google. https://www.dearstage2.com/p/writing-content-that-ranks-with-llms
Writing Content That Ranks with LLMs
Why traditional SEO isn't enough, and how to create content that gets found by modern buyers using AI tools.
cstu.io
July 21, 2025 at 5:09 PM
I've been talking about this for a while now. AI has taught us a new way to 'shop.' Notes on getting noticed outside of Google. https://www.dearstage2.com/p/writing-content-that-ranks-with-llms