Телеграм канал «Reddit DevOps»

Can I switch from Desktop Support to DevOps?

I’m from Ahmedabad, India, and currently working in IT support, mainly desktop support and Windows troubleshooting.

I’ve been practicing DevOps for around 1 year and have RHCSA, RHCE, and AWS Solutions Architect Associate (SAA) certifications.

Can I switch directly from desktop support to a Junior DevOps/Cloud Engineer role with these skills and certifications? Or will desktop support experience make it difficult to get a DevOps job?

I’d appreciate advice from people who have made a similar career transition.

https://redd.it/1xfq488
@r_devops

Is it difficult to switch from Desktop Support to DevOps?

I’m from Ahmedabad, India, and I’m starting my corporate career with my first internship in IT support, mainly desktop support and Windows troubleshooting.

I’ve been practicing DevOps for around 1 year and have RHCSA, RHCE, and AWS Solutions Architect Associate (SAA) certifications. However, I couldn’t find opportunities in System Administration or Cloud Support, so I accepted this internship.

Can I switch to a Junior DevOps/Cloud Engineer role after gaining some corporate experience in desktop support, or will it be difficult to make the transition?

I’d appreciate advice from people who have made a similar career switch.

https://redd.it/1xfu1cz
@r_devops

Diffinery: Open-source GitHub and GitHub Actions alternative that runs entirely on Cloudflare
https://redd.it/1xftjg1
@r_devops

Making attacking agents pay with Context Bombs
https://agentic.tracebit.com/factory/

https://redd.it/1xfsq7l
@r_devops

Weekly Self Promotion Thread

Hey r/devops, welcome to our weekly self-promotion thread!

Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!

https://redd.it/1xfq7qc
@r_devops

DevOps its a good entry job?

For the past 10 months, I've been working as a DevOps Intern. I've focused heavily on filling the gaps left by my university curriculum—mastering tools like Docker, Terraform, scripting, and cloud infrastructure—and I recently earned my AWS Solutions Architect certification. However, during this time, I haven't written much traditional code. My day-to-day is strictly DevOps, which feels very different from standard software engineering.

I am currently 21 and in my 7th semester of a Software Engineering degree. Lately, I've noticed that the most lucrative internship and new-grad opportunities are in pure software engineering. I feel like I wouldn't pass the technical interviews for these roles because my recent focus has been entirely away from coding.

What should I do? Should I get back into coding and grind LeetCode to aim for these SWE roles, or stick to my current DevOps path?

https://redd.it/1xfm70g
@r_devops

Two widely used npm packages had their security advisories withdrawn. How should we handle false positives in dependency audits?

Both the braces and sprintf-js security advisories have been withdrawn, despite previously being marked as GitHub Reviewed.

braces: CVE-2026-93687 / GHSA-vfj7-8cjw-p6xm
sprintf-js: CVE-2026-97058 / GHSA-hp3w-g68c-fv3c

I understand that third-party security risks are a pressing concern. Last week was particularly rough, with incidents and critical vulnerabilities involving LiteLLM, PHP, intermediate CAs, Brotli, and more. Security teams everywhere have been scrambling to assess their exposure and mitigate potential risks.

However, these two widely used npm packages, commonly pulled in through linters, test frameworks, and other development tools, have once again caused unnecessary alarm across the ecosystem.

Both advisories have now been withdrawn, but not before triggering security alerts and forcing developers to investigate issues that turned out not to be practically exploitable.

How much can we trust automated dependency audits when even reviewed security advisories can turn out to be false positives?

More importantly, what should change in how vulnerability reports are vetted, published, and propagated to downstream security tools?

https://redd.it/1xfikfb
@r_devops