2023 DevSecOps Forecast: Five Key Trends Shaping Software Supply Chain Security, AI/ML Integration, and Observability

In 2023 enterprises will intensify focus on software supply‑chain security, making it the top priority and extending security responsibilities to frontline engineers, while integrating artifact proof and SBOM generation as mandatory practices.

Security will become a core component of DevOps education, with training programs and university curricula introducing the "security left‑shift" principle to develop a workforce skilled in identifying and remediating vulnerabilities.

AI and machine learning will be woven throughout the software development lifecycle, automating repetitive tasks, enhancing productivity, and supporting ModelOps, while also raising concerns about privacy, intellectual‑property rights, and licensing of training data.

Value‑stream analysis will gain prominence, enabling organizations to assess the true business value delivered by development processes, drive digital transformation, and inform investment decisions beyond mere efficiency metrics.

Observability will move left in the DevSecOps pipeline, with technologies such as eBPF supporting cloud‑native environments, improving automated code detection, capacity planning, and overall workflow efficiency.