AI and Security Lead DevSecOps Priorities in 2024 GitLab Report

The 2024 Global DevSecOps Report from GitLab reveals significant trends and evolving priorities among software development professionals worldwide, as highlighted in a comprehensive survey of 5,315 industry experts. The report shows an unprecedented surge in the adoption and planned implementation of artificial intelligence (AI) technologies, with 78% of respondents indicating plans to integrate AI within the next two years, a notable increase from 64% last year. This trend underscores a broader shift in the industry towards leveraging AI to enhance efficiency and innovation in development processes. Additionally, the report places a strong emphasis on security and automation, reflecting an increased awareness and proactive stance on these critical issues. As organizations aim to stay ahead in the competitive tech landscape, the findings underscore the importance of prioritizing AI and security in the software development lifecycle.

Emphasis on Security and Software Supply Chain

Security emerges as a major focal point in the GitLab report, with an overwhelming number of respondents prioritizing measures to safeguard their software. One key insight is that 67% of professionals now use open source libraries for at least a quarter of their code, demonstrating a strong reliance on community-driven resources. This prevalent use of open-source components also highlights the potential vulnerabilities that could be introduced into applications, making comprehensive security practices more crucial than ever. Despite this reliance, the report reveals a concerning gap: only 21% of organizations employ a software bill of materials (SBOM) to document their software components. This significant discrepancy points to an area needing greater attention and improvement, as the absence of detailed documentation can hinder effective risk management and mitigation strategies.

The combination of heavy reliance on open source libraries and inadequate documentation of software components underscores the critical need for enhanced supply chain security measures. The potential risks associated with unvetted code and poorly tracked software components can be substantial, impacting not only the application itself but also its users and stakeholders. Organizations are increasingly called upon to implement stringent policies and practices to mitigate these risks, safeguarding their software environments from potential threats. Closing this gap in comprehensive security practices requires a concerted effort from development teams, emphasizing the need for robust SBOMs to achieve a transparent and secure software supply chain.

Automation Drives Operational Efficiency

Automation continues to play a pivotal role in transforming the software development lifecycle, with the GitLab report highlighting that 67% of respondents report their processes are mostly or completely automated. This aligns with the broader industry trend of optimizing workflows to enhance both efficiency and security. Automation tools not only streamline tedious and repetitive tasks but also significantly reduce the margin for human error, leading to more consistent and reliable outcomes. As organizations strive to stay competitive and deliver high-quality software, the adoption of automation technologies is becoming indispensable.

Investment priorities for 2024 have shifted, with security and AI now taking precedence over other areas like cloud computing, which dropped to fifth place in strategic importance. Despite this shift, cloud computing remains significant, with a steady increase in cloud-based application deployments reported by many organizations. This trend indicates that while cloud computing continues to be a vital component of modern software development ecosystems, the focus is increasingly leaning towards integrating AI and enhancing security measures. By automating various stages of the development process, from code review to deployment, organizations can achieve greater speeds and efficiency, freeing up valuable resources for more strategic and innovative tasks.

C-Level Endorsement and Positive Outlook

Automation continues to revolutionize the software development lifecycle, with GitLab reporting that 67% of respondents claim most or all of their processes are automated. This trend mirrors the industry-wide focus on optimizing workflows to boost efficiency and security. Automation tools simplify repetitive tasks and minimize human error, resulting in more consistent and reliable outcomes. As companies seek to remain competitive and deliver top-quality software, adopting automation technologies becomes essential.

For 2024, investment priorities have shifted, with security and AI now topping the list, even pushing cloud computing to fifth place in strategic importance. Nevertheless, cloud computing remains crucial with a steady rise in cloud-based application deployments. This trend suggests that while cloud computing is a key element in modern software development, there’s a growing emphasis on integrating AI and bolstering security measures. Automating various stages of development—from code review to deployment—enables organizations to achieve faster speeds and greater efficiency, thereby freeing up resources for more strategic, innovative endeavors.

Explore more

How Will Sovereign Clouds Power AI in Southeast Asia?

The rapid proliferation of generative artificial intelligence across Southeast Asia has reached a critical juncture where the thirst for innovation often clashes with stringent national data residency laws. As organizations transition from small-scale pilot programs to full production environments, the demand for a sovereign-by-design infrastructure has shifted from a niche technical requirement to an absolute strategic necessity for corporate survival.

GCash Empowers Philippine MSMEs With Digital Payment Tools

Traditional street-side stalls and high-end boutiques across the Philippine archipelago are currently navigating a historic transformation as the nation pivots away from a reliance on physical currency toward a comprehensive digital-first economic framework. Government initiatives are set to ensure that digital transactions comprise the vast majority of retail payments from 2026 to 2028, sparking an urgent necessity for local enterprises

How ECSPR Professionalizes European P2P Lending

The European peer-to-peer lending market has transitioned from a fragmented collection of loosely supervised national experiments into a sophisticated and highly regulated financial ecosystem. This shift represents a fundamental maturation of the industry, as the implementation of the European Crowdfunding Service Providers Regulation has effectively neutralized the systemic risks that once plagued cross-border investments. Before this unified framework, an investor

Can Calico for VMs Finally Replace VMware NSX?

The rapid erosion of traditional virtualization dominance has forced modern infrastructure leaders to confront a painful reality regarding the persistence of legacy virtual machine dependencies. While the industry is pivoting aggressively toward containerization, the reality is that mission-critical virtual machines cannot simply be decommissioned overnight due to their deep integration into corporate business logic. Tigera has responded to this tension

AWS DevOps Agent Automates GitHub CI/CD Troubleshooting

Modern engineering teams frequently find themselves trapped in an exhaustive cycle of manual log analysis and iterative patching whenever a mission-critical CI/CD pipeline experiences a sudden failure. The sheer volume of telemetry data generated by modern microservices architectures often obscures the actual root cause of build errors, leading to prolonged downtime and developer burnout. In 2026, the reliance on human