JetBrains told everyone to patch. It didn’t patch itself.
JetBrains is urging users of its Cadence cloud development service to rotate credentials and treat previous executions and their outputs The post Je…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
The npm attack that turned provenance attestations into camouflage
⁠Security researchers this week disclosed an npm supply-chain attack affecting more than 400 packages, including projects connected to Keyv an…
Forget humans “in” the loop. Harness engineering puts humans “on” the loop.
AI has us quickly forgetting humans as the software delivery loop. Now, forget humans in the loop. For Thoughtworks’ distinguished The post Fo…
“Every few months, a new model made part of our roadmap unnecessary”: Why Mendral’s founders gave up their startup for Anthropic
Anthropic is bringing the team behind AI startup Mendral on board to strengthen Claude’s software engineering capabilities. As part of The pos…
85% say code review is the new bottleneck. Here’s what the AI coding narrative leaves out.
A merge is a contract. The moment a change lands on main, every other team in the organization starts building The post 85% say code review is the n…
Why traditional CI/CD fails for LLMs (and the release gates we built to fix it)
This article explains why traditional CI/CD gates are not enough for production AI systems. I share a practical release-gating approach The post Why…
Cordyceps flaw pattern is more proof CI/CD is part of the attack surface
On June 24, research from Novee Security was released, reporting a CI/CD weakness that could enable anyone with an unauthenticated The post Cordycep…
The call is coming from inside your pipeline: the anatomy of a Codecov attack
In January 2021, an attacker added a single line of code to a popular bash script. Tens of thousands of The post The call is coming from inside your…
“The harness is where the hard work is”: Harness bets on agents that enterprises can trust in production
The agentic platform Harness launched Autonomous Worker Agents on Tuesday, enabling enterprises to replace fixed scripts in their delivery…
AI teams now deploy 1,000 times a month. Your pipeline wasn’t built for that.
There’s mounting evidence that AI coding tools are delivering on their less outlandish promises. With adoption shifting from 76% in The post A…
GitLab 19.0 trades its string section for a full DevSecOps orchestra
There are orchestras… and then there are mere string, horn, or woodwind sections. As the self-styled intelligent orchestration platform for Th…
CI wasn’t built for coding agents. Here’s what comes next.
For years, integration tests have lived inside CI pipelines, triggered on push and answered ten, twenty, or thirty minutes later. The post CI wasn&#…
As agentic dev tools boom, workflow auditability becomes the constraint
Recently, I was working with a senior engineering leader at a large financial institution to review their DevSecOps platform engineering The post As…
Improving token efficiency in GitHub Agentic Workflows
Agentic workflows that run on every pull request can quietly accumulate large API bills. Here's how we instrumented our own production workflows, fo…
The agent code explosion is here. We need to rethink our pipelines, fast.
GitHub recently published an update on availability following a couple of rough incidents in April. The article opened with a The post The agent cod…