The DevOps, SRE, Platform and Cloud Engineering News Podcast
Ship It Weekly
The DevOps and SRE podcast for practitioners — honest conversations on shipping software, running production, and the on-call reality the keynotes skip.
Where to Listen
Available on all major podcast platforms
Rep the show — Shop SIW merch.
Latest Episodes
Catch up on every episode of Ship It Weekly

GitHub Actions Lockfiles, GitLab CVSS 10 CI Flaw, Google Cloud Storage Outage & Torvalds Builds Kernel Patches With Claude Code
This episode of Ship It Weekly covers GitHub Actions' new workflow lockfiles, which help pin actions to specific commits, enhancing security.

Critical Atlassian CVE Hits Jira, Confluence & Bitbucket, GitHub Copilot Sandboxing Goes GA, AWS Lambda SnapStart for Containers & Google Spanner Omni
This episode of Ship It Weekly discusses a critical vulnerability in Atlassian's Data Center products, including Jira and Confluence. It also covers GitHub Copilot's new sandboxing feature, AWS Lambda SnapStart's operational risks, and the availability of Google Spanner Omni.

AWS Retires DevOps Guru: What the End of Support Means, Kubernetes Cross-Namespace CVE-2026-2270, Node.js Undici WebSocket DoS & Cloudflare’s New CLI for AI Agents
This episode of Ship It Weekly discusses AWS's retirement of DevOps Guru, urging users to transition to CloudWatch and Amazon DevOps Agent. It also covers Kubernetes vulnerabilities, a Node.js issue with Undici, and Cloudflare's new CLI for AI agents.

AWS Puts Elastic Beanstalk on EKS, CrowdSec Supply-Chain Breach, Critical Next.js RCE, Microsoft Disrupts EvilTokens & Why Fixing the Initial Compromise Isn’t Enough
This episode of Ship It Weekly discusses AWS's new Elastic Beanstalk Cluster Mode, enabling multiple apps on shared EKS infrastructure. It also covers CrowdSec's supply-chain breach, a critical Next.js RCE vulnerability, and Microsoft's disruption of the EvilTokens platform.

GitHub Actions Security, Cisco Email Gateway RCE, Helm 3 End-of-Life, Ubuntu 26.04 Runners & Why “Nothing Changed” Is Never the Whole Story
This episode of Ship It Weekly discusses new GitHub Actions workflow execution protections, enhancing security by controlling who can trigger workflows. It also covers Cisco's critical email gateway vulnerabilities, Helm 3's end-of-life, and the upcoming Ubuntu runner transition.

Amazon Linux 2027, GitHub Actions Cache Security, Secret-Scanning Merge Blocks, N-central CVSS 10 RCE, Karmada Graduation, ShieldCrash, CodeQL ARM64 & When Observability Fails Too
This episode of Ship It Weekly discusses Amazon Linux 2027's public preview featuring SELinux by default and updates for compatibility testing. It also covers GitHub Actions' new cache permissions to enhance security and the critical RCE vulnerability in N-able N-central.

AWS GWLB TCP Reset, Azure DevOps Live Migrations to GitHub, GitHub Runner Enforcement, Docker Root Risk, Lambda IAM Updates, PostgreSQL Upgrade Traps, SonicWall Zero-Days & Better Incident Reviews
This episode of Ship It Weekly discusses AWS Gateway Load Balancer's new TCP Reset feature, enhancing recovery from network failures. It also covers Azure DevOps' migration tools to GitHub, GitHub's enforcement of self-hosted runners, and Docker security risks.

Cloudflare Saves 100TB of RAM, AI Drives Server Prices Up, AWS Adds a Fourth London AZ, Route 53 DNS Self-Service, AKS eBPF Routing, Go 1.27, and the Danger of Hidden Infrastructure Assumptions
In this episode, Ship It Weekly discusses Cloudflare's 100TB RAM savings through low-level cache optimizations and the implications of AI-driven price hikes in memory. AWS adds a fourth London Availability Zone, revealing hidden infrastructure assumptions.

GitHub Outage, PleaseFix Agentic Browser Vulnerability, AWS Certificate Manager Drops Email Validation, Cloudflare TypeScript CI Workflows, AI Observability Consolidation, and the Hidden Cost of “Simple” Platform Changes
This episode of Ship It Weekly discusses the recent GitHub outage affecting critical developer workflows and highlights the PleaseFix vulnerability in agentic browsers.

Railway US East Outage, Stripe’s Graph-Based Database Recovery, Kata Containers Host Escape, DynamoDB Vector Search, AWS Network Firewall Proxy, Gateway API 1.6, and containerd 2.4
This episode of Ship It Weekly discusses the aftermath of Railway's US East outage, emphasizing the importance of understanding state post-failure.

AI Agents Target GitHub, Kubernetes 1.37 Deprecations, AWS Transit Gateway Policy Routing, IAM Identity Center Multi-Region, Cloudflare Meerkat, AMOS Mac Malware, and the Risk of Half-Migrated Production Systems
This episode of Ship It Weekly discusses AI agents from Anthropic and OpenAI taking unsanctioned actions during UK cyber tests, including a malicious GitHub pull request.

Telstra’s Time Sync Outage, DoorDash’s 1.5M RPS Cache, Stateless MCP, GitHub and PyPI Supply Chain Delays, and Why the Quietest Infrastructure Often Has the Biggest Blast Radius
This episode discusses Telstra's significant outage caused by a timing device malfunction and explores DoorDash's innovative caching strategies for high request volumes.

AWS CloudFormation Express Mode, Spark 4.2 Vector Search, AI Speeds Coding but Not Delivery, Platform Governance Developers Won’t Hate, and Why Could Is Not the Same as Should
This episode of Ship It Weekly explores AWS CloudFormation Express mode, which accelerates deployment feedback but may mislead on resource readiness.

GitHub API Enumeration, Grok Build CLI Data Exposure, AWS Security Hub Network Scanning, AI-Powered Patch Pressure, and Why Visibility Is Not Ownership
This episode of Ship It Weekly explores GitHub API enumeration, data exposure from AI tools, and AWS Security Hub's new features.

EKS Rollbacks, GitHub Actions Supply Chain Attacks, AI Agentjacking, CloudWatch Log Alarms, and Why Safety Nets Don’t Replace Ownership
This episode of Ship It Weekly discusses Amazon EKS's new Kubernetes version rollbacks, GitHub Actions supply chain risks, and AI agentjacking via fake telemetry.

Amazon Q CVEs, Hijacked npm and Go Packages, AWS WAF HTTP/2 Issues, Lambda MicroVMs, and Why Execution Is the Boundary Now
This episode of Ship It Weekly discusses critical CVEs affecting Amazon Q Developer and AWS language servers, highlighting trust-boundary issues.

containerd CRI Vulnerabilities, Datadog PostgreSQL HA on Kubernetes, AWS DevOps Agent with Datadog MCP Server, EKS Control Plane Egress, and Why Users Feel the Wait
This episode of Ship It Weekly discusses recent containerd CRI plugin vulnerabilities and Datadog's findings on PostgreSQL high availability failover safety.

PeopleSoft Zero-Day Exploited, npm v12 Install Script Changes, GitHub Agentic Tokens, Anthropic Model Risk, and Default Trust Breaking
This episode of Ship It Weekly discusses the risks of default trust in software systems. Brian covers Oracle's PeopleSoft zero-day, npm v12's install-script changes, GitHub's shift away from personal access tokens, and Anthropic's AI model removals.

Coinbase Outage, Meta AI Account Recovery, AWS AgentCore Code Injection, Apigee Tenant Isolation, and the Glue That Breaks Production
This episode of Ship It Weekly discusses critical infrastructure failures and their implications. Brian analyzes Coinbase's outage due to an AWS cooling failure, Meta's AI-driven account recovery issues, and vulnerabilities in AWS AgentCore and Google Apigee.

Kiro CLI Approval Bypass, Amazon Braket Pickle Risk, AWS Org Logging, KEDA Upgrades, and Automation’s Hidden Boundaries
This episode of Ship It Weekly explores automation's hidden boundaries, focusing on Kiro CLI's CVE-2026-9255 approval bypass and Amazon Braket's Python pickle risk.

GitHub Supply Chain Attacks, Railway’s GCP Outage, Discord’s Voice Failure, AWS Retry Changes, and Trusted Tool Risk
This episode of Ship It Weekly discusses the growing risks of trusted tools in production, highlighted by a GitHub supply chain attack involving a compromised VS Code extension.

CISA’s GitHub Leak, AI Root Cause Analysis, Copilot Agents, Claude Code in CI/CD, and Kubernetes Seccomp Risk
This episode of Ship It Weekly discusses the implications of the CISA GitHub leak, highlighting the exposure of AWS keys and internal documentation.

AI Agents Get API Access and Identity: GitHub Copilot Cloud Agents, MCP Auth, Ansible Automation, OpenAI Daybreak, and the New Production Risk
This episode explores the shift of AI agents from coding assistants to operational actors. Topics include GitHub's REST API for Copilot cloud tasks, Auth0's MCP authentication, and Ansible as an execution layer.

Cursor Deletes PocketOS Prod DB, .de DNSSEC Outage, Bluesky Postmortem, Argo CD, and Copy Fail
This episode of Ship It Weekly discusses modern reliability challenges, including the PocketOS database wipe and the .de DNSSEC outage.

GitHub RCE, AI Agent Prompt Injection, and the New Reality: Your Developer Toolchain Is Production Now
This episode of Ship It Weekly discusses the evolving role of developer tools in production environments. Brian covers critical vulnerabilities like GitHub's git push RCE, AI prompt injection, and supply chain incidents, highlighting the need for enhanced security measures in
Find your entry point
Curated paths beyond the episode feed — new listeners, interviews, transcripts, and subscribe links
Browse by Topic
Jump into curated feeds for the subjects we cover most
Work With the Show
Come on as a guest or partner with Ship It Weekly as a sponsor
Be a Guest
Want to share your DevOps journey on Ship It Weekly? We're looking for passionate engineers to interview!
Apply to be a Guest →Become a Sponsor
Reach thousands of DevOps, Platform, and Cloud Engineering professionals. Partner with Ship It Weekly!
Latest Updates
Announcements, milestones, and behind-the-scenes from Ship It Weekly
The merch store is open at store.tellerstech.com. Right now you'll find Ship It Weekly–themed tees — the first drop from the Teller's Tech store. More products are coming; this is the starting lineup. If you grab one, tag the show — we'd love to see it in the wild.
Read more →About Ship It Weekly
Ship It Weekly is a short, practical recap of what actually matters in DevOps, SRE, cloud infrastructure, and platform engineering.
Each episode, your host Brian Teller walks through the latest outages, releases, tools, and incident writeups, then translates them into “here’s what this means for your systems” instead of just reading headlines. Expect a couple of main stories with context, a quick hit of tools or releases worth bookmarking, and the occasional segment on on-call, burnout, or team culture.
This isn’t a certification prep show or a lab walkthrough. It’s aimed at people who are already working in the space and want to stay sharp without scrolling status pages, cloud updates, and blogs all week. You’ll hear about things like cloud provider incidents, Kubernetes and platform trends, Terraform and infrastructure changes, and real postmortems that are actually worth your time.
Most episodes are 15–30 minutes, so you can catch up on the way to work or between meetings. Every now and then there will be a “special” focused on a big outage or a specific theme, but the default format is simple: what happened, why it matters, and what you might want to do about it in your own environment.
If you’re the person people DM when something is broken in prod, or you’re building the cloud and platform everyone else ships on top of, Ship It Weekly is meant to be in your rotation.
Meet Brian Teller
Brian is the host of Ship It Weekly and of Kube Signals on KubeFM, and the builder behind Teller's Tech, a media and training platform focused on DevOps, SRE, platform engineering, cloud infrastructure, and the real-world work of keeping production systems alive.
Brian started Ship It Weekly because most tech news says what happened—but not always why it matters to the people on-call when the headline becomes their incident.