When AI Agents Break DevOps: Securing Pipelines from Autonomous Workflows (Nov. 12th)
Thursday, November 12th, 2026: 9:00 AM to 10:00 AM
DevOps.com webinar with JFrog: a live build shows how AI agents pull risky packages into pipelines, and how to block them.
The Shai-Hulud attack showed how an AI agent pulling in an unchecked package can spread through npm registries to steal developer credentials and cloud keys.
In this hands-on DevOps.com webinar sponsored by JFrog, developer advocate Francesco Ciulla and JFrog solution architect Mark Whitby build a real application with AI agents.
Viewers see in real time how risky, immature and malicious packages try to enter the IDE, local environment and CI pipeline, and how JFrog stops them without slowing development.
Takeaways include where AI-assisted development adds supply chain risk and how to enforce controls in CI/CD.