CI/CD news, without the vendor noise.
Independent CI/CD & deployment news — concise, vendor-neutral takes on pipelines, releases and DevOps tooling.
Latest
252 moreYour DevOps platform's real bill is not on the invoice
A new GitLab post walks through what actually adds up to a DevOps platform's total cost of ownership. The subscription line is the easy part; the variable compute, the AI usage and the engineer-hours are where teams keep getting surprised.
Sep 13, 2026 · Priya Nair · about.gitlab.comPlatform engineeringGitLab's Co-Create recap lands W3C trace context and merge-train limits in CI/CD
GitLab's half-year Co-Create program recap flags three shipped CI/CD changes: new W3C Trace Context variables in pipeline jobs, configurable merge-train pipeline limits, and a REST API for Terraform state protection rules.
Sep 13, 2026 · Maya Okonkwo · about.gitlab.comDeveloper experienceWhen your pipeline is fast and your product still isn't
Brad Nelson argues on DevOps.com that reducing DevOps maturity to a CI/CD scoreboard misses what the Three Ways were actually about. As someone who spends most days tuning pipelines, I think he's mostly right, and it stings a little.
Sep 12, 2026 · Priya Nair · devops.comRunners & infrastructureKubernetes 1.37 turns native histograms on by default for its own metrics
The Prometheus native-histogram format graduates to beta in Kubernetes 1.37 and ships enabled by default, promising smaller time-series and sharper latency percentiles for the metrics the control plane already emits.
Sep 12, 2026 · Maya Okonkwo · kubernetes.ioRunners & infrastructureKubernetes 1.37 promotes gang scheduling to a first-class Workload API in beta
Kubernetes v1.37 graduates the Workload and PodGroup APIs, Workload-Aware Preemption, and shared DRA ResourceClaims to beta, moving all-or-nothing scheduling out of third-party operators. A new CompositePodGroup API lands in alpha for hierarchical training topologies.
Sep 12, 2026 · Maya Okonkwo · kubernetes.ioSecurity & supply chainGitLab's critical patch: unauth file read from the commits API
GitLab 19.3.2, 19.2.6 and 19.1.8 ship eighteen CVEs' worth of fixes, including a Critical unauthenticated arbitrary-file read on the repository commits API. Self-managed operators have a downtime problem stacked on top of a rotate-your-CI-variables problem.
Sep 11, 2026 · Tomás Vega · docs.gitlab.comPlatform engineeringKubernetes v1.37 stops your in-place Pod resize from stalling on a full node
An alpha feature gate in Kubernetes v1.37 lets the scheduler evict lower-priority Pods on the same node to unblock a higher-priority Pod's in-place CPU or memory scale-up. In-place resize itself went GA back in v1.35, and this fills the last big gap in that workflow.
Sep 11, 2026 · Priya Nair · kubernetes.ioRunners & infrastructureXcode 27 runner image on GitHub-hosted macOS moves to macOS 27
GitHub bumped the operating system underneath its public-preview Xcode 27 runner image from macOS 26 to macOS 27, per the September 10 changelog. The runner labels stay the same, so the OS shift lands on the next job that requests them, with no workflow edit.
Sep 11, 2026 · Maya Okonkwo · github.blogPlatform engineeringAlloyDB Omni's RPM orchestrator goes GA, alongside Omni 18.3.0
Google Cloud's Red Hat RPM orchestrator for AlloyDB Omni is now generally available and ships alongside AlloyDB Omni 18.3.0. It moves PostgreSQL installation and lifecycle on RHEL-family hosts out of hand-rolled scripts and into a package-managed workflow.
Sep 10, 2026 · Maya Okonkwo · cloud.google.comCI observabilityCodeQL 2.27.0 ships a native Linux ARM64 build
GitHub's static analysis engine now ships a native linux-arm64 CLI and bundle in 2.27.0, alongside a new Rust security query and expanded Java, Kotlin and C# framework coverage. Teams that already moved their runners to ARM stop paying an emulation tax on code scans.
Sep 10, 2026 · Maya Okonkwo · github.blogSecurity & supply chainGTIG's agentic threat report is a CI/CD problem, not just an AI problem
Google's Threat Intelligence Group documents DUSTMAKER, an OIDC-stealing supply-chain payload from UNC6780 that ships valid SLSA Build 3 attestations. The moment a signed provenance line stops being a defence is the moment CI/CD owners have to rethink runner trust.
Sep 10, 2026 · Tomás Vega · cloud.google.comPlatform engineeringApica bolts a natural-language agent and MCP server onto Ascent 3.0
Ascent 3.0 lets operators reshape telemetry pipelines in English via an agent called Venn, and opens the platform's own AI to outside tools through an MCP server. Destructive edits still gate on admin approval.
Sep 9, 2026 · Maya Okonkwo · devops.comAccess & identityThe kubectl client secret CNCF wants you to stop distributing
A CNCF blog post argues that the 'confidential' OIDC client most on-prem clusters use for kubectl is a shared static credential in disguise, and that a public client with PKCE is the honest fit for a CLI that lives on every operator's laptop.
Sep 9, 2026 · Tomás Vega · cncf.ioKubernetesKubernetes v1.37 Garhwal ships with 67 enhancements
Kubernetes v1.37, code-named Garhwal, is out with 67 enhancements: 16 GA, 23 Beta, 27 Alpha and one deprecation. The headline items land in scheduling, storage, autoscaling and cluster identity.
Sep 9, 2026 · Maya Okonkwo · kubernetes.ioCI observabilityGitHub Actions tracing without editing a single workflow file
A CNCF write-up walks through wiring the OpenTelemetry Collector's alpha githubreceiver to org-level Actions webhooks, turning workflow_run and workflow_job events straight into OTLP spans.
Sep 8, 2026 · Priya Nair · cncf.ioKubernetesKubernetes 1.37 turns Storage Version Migration on by default
Storage Version Migration graduated to GA in Kubernetes v1.37, and the built-in StorageVersionMigration API and controller are enabled on every v1.37 cluster. Rewriting stored objects to a new schema version is now a first-class control loop that ships with core.
Sep 8, 2026 · Maya Okonkwo · kubernetes.ioSecurity & supply chainRootless Kubernetes finally reaches beta, eight years after the first experiment
Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta. Kubelet, the container runtime, CNI plugins and kube-proxy can now all run as an unprivileged user on the host.
Sep 8, 2026 · Tomás Vega · kubernetes.ioRunners & infrastructureGitLab Dedicated stops asking you to run the runners
GitLab Dedicated now ships with hosted runners, so single-tenant customers no longer have to build and patch their own fleet. Every other hosted CI splits the same problem differently, and each split has a rough edge.
Sep 7, 2026 · Priya Nair · about.gitlab.comSecurity & supply chainMinIO is archived. Docker wants to rent you the patches.
Docker is pitching Extended Lifecycle Support as the answer to MinIO reaching end of life, promising patched images and audit evidence for up to five years past upstream archival. For CI/CD owners carrying an EOL dependency, that reframes a migration deadline as billable time.
Sep 7, 2026 · Tomás Vega · docker.comSupply chain securityThe sandbox you thought was closed
The New Stack uses a July 16 intrusion at Hugging Face to name a security category that has been forming for a year: an AI agent breaking out of its containment. For CI/CD teams giving agents build-time access, the sandbox is one control, not the whole boundary.
Aug 25, 2026 · Tomás Vega · thenewstack.ioCI performanceGitLab wants to end the default full-history clone in CI
A GitLab engineering post argues that defaulting to a full-history git clone imposes a real, cumulative tax on end-to-end pipeline time, and floats a clone override policy to bring the cost down.
Aug 25, 2026 · Priya Nair · about.gitlab.comRunners & infrastructureA slimmer Dragonfly for teams who just want faster image pulls
A CNCF post walks through a lightweight Dragonfly install that keeps peer-to-peer image and file distribution, but drops the Manager, MySQL and Redis. If registry pulls are your CI's slowest step, this is the shape of Dragonfly worth trying first.
Aug 24, 2026 · Priya Nair · cncf.ioCode quality & testingGitHub splits Code Quality off the Actions billing meter
GitHub Code Quality CodeQL workflows now run on a dedicated Actions path, per an August 20 changelog. Their runs no longer count against a repo's regular Actions usage, and no longer sit in the same workflow-run history as the rest of its CI.
Aug 24, 2026 · Maya Okonkwo · github.blogRunners & infrastructureWindows 11 arm64 with VS2026 goes GA on GitHub-hosted runners
GitHub Actions promoted its Windows 11 arm64 image with Visual Studio 2026 to general availability on both standard and larger GitHub-hosted runners. For teams shipping native ARM Windows binaries out of CI, the self-hosted detour stops being the only option.
Aug 24, 2026 · Maya Okonkwo · github.blogSecurityCodeQL 2.26.3 retunes its Actions queries and drops the self-hosted module
CodeQL 2.26.3 reworks how the engine reasons about GitHub Actions workflows, tightening output-clobbering, cache-poisoning and env-var injection queries and removing the self-hosted runner module. Hosted code scanning is already on the new pack, so the next full run may move alert counts in both directions.
Aug 23, 2026 · Maya Okonkwo · devops.comIncident responseGitHub carves credential revocation into per-token-type actions
GitHub's incident-response tooling now lets enterprise owners and org admins deauthorize or revoke user credentials one token type at a time, in the UI and via API. The blast radius of a bad revoke shrinks, and every action lands in the audit log.
Aug 23, 2026 · Maya Okonkwo · github.blogAI in CI/CDVS Code 1.133 pulls agent sessions out of the editor process
VS Code 1.133 moved AI agent sessions into a standalone Agent Host that outlives the window and can be reached over SSH or a dev tunnel, per DevOps.com. Microsoft published the wire format as the Agent Host Protocol under an MIT license.
Aug 23, 2026 · Maya Okonkwo · devops.comSecurity & supply chainThe arrayref takeover is the crates.io threat model, not a surprise
A DevOps.com report says attackers took over the maintainer account behind the popular Rust crate arrayref and pushed four additional attacker-owned crates carrying information-stealing malware. The more useful question for CI/CD teams is what your build farm did with that code before anyone noticed.
Aug 22, 2026 · Tomás Vega · devops.comDeveloper experienceCodex CLI arrives as a repo-versioned pipeline step
A CI/CD platform has added a first-party OpenAI integration and a Codex CLI action, letting teams run the coding agent as a versioned pipeline step with a chosen model, a sandbox mode and prompts stored as files. It is a small change in shape with an outsized effect on how reviewable an agent run becomes.
Aug 22, 2026 · Priya Nair · buddy.worksGovernanceGitHub takes rule insights up a level: bypass counts across the whole org
GitHub's rule insights dashboard is in public preview at the organization level, adding aggregated ruleset evaluation metrics, a top-repos-by-bypass view, filters and a CSV export. Platform teams that already run rulesets as a gating primitive get a single pane for who is actually going around them.
Aug 22, 2026 · Maya Okonkwo · github.blogSecurity & supply chainDocker Sandboxes plug into GitHub Agentic Workflows as an agent runtime
Docker has published a walk-through of running an AI coding agent inside a Docker Sandbox as part of a GitHub Actions job, with the sandbox microVM, a private Docker daemon and a network allowlist doing the isolation. The example moves the agent's blast radius off the runner and behind a policy the workflow file can see.
Aug 21, 2026 · Tomás Vega · docker.comRunners & infrastructureGitHub says 2.9 billion commits a month, and CI is the downstream tenant
The New Stack puts GitHub's monthly load at 2.9 billion commits, 130 million merged pull requests and 24 million new repositories, and reports the platform is straining under it. For teams running on Actions, that is a queue-depth story more than a growth story.
Aug 21, 2026 · Maya Okonkwo · thenewstack.ioSupply-chain securityisolated-vm ships a sandbox escape, and the migration story catches up with itself
A type-confusion bug in isolated-vm's ExternalCopy transferList lets sandboxed JavaScript hijack the host process. The library that inherited vm2's job now inherits its threat model too.
Aug 21, 2026 · Tomás Vega · devops.comSupply-chain securityDocker argues AI agent security is a systems problem, not a review problem
A Docker blog post citing an OpenAI/Hugging Face incident with 17,600 attacker actions says human review can't scale to agent-speed CI, and calls for controls that constrain, observe and govern agents at machine speed.
Aug 20, 2026 · Tomás Vega · docker.comIdentity and accessEKS clusters lag on an AWS auth deprecation, per The New Stack
The New Stack reports that 81% of Amazon EKS clusters still run an AWS EKS authentication method the vendor has deprecated. For platform teams whose deploy pipelines target EKS, the number reads as a migration flag against the auth path baked into kubeconfigs, CI service accounts and IaC modules.
Aug 20, 2026 · Maya Okonkwo · thenewstack.ioTesting & quality gatesSelf-healing tests fixed themselves. Now the deploy needs a second look.
A DevOps.com essay argues that when end-to-end tests rewrite their own locators and rerun to green, CI/CD needs an explicit gate that treats the repair as a review event rather than a normal pass. Here is what that gate can actually look like in a pipeline.
Aug 20, 2026 · Priya Nair · devops.comDeveloper experienceAgent Plugins 1.0 goes GA across VS Code, Copilot CLI and the Copilot app
GitHub has made Agent Plugins 1.0 generally available across VS Code, Copilot CLI, the GitHub Copilot SDK and the Copilot app. One package, four surfaces, and a governance path for the security team.
Aug 19, 2026 · Priya Nair · github.blogRunners & infrastructureAzure Pipelines opens an arm64 macOS preview with Xcode 27 in the pay-as-you-go pool
Microsoft added Apple Silicon macOS agents carrying Xcode 27 to Azure DevOps as a public preview, delivered through the pay-as-you-go GitHub-hosted Agents pool. For iOS and macOS pipelines that have been running Xcode on Rosetta-under-Intel agents, the native arm64 path is finally in reach on a Microsoft-hosted fleet.
Aug 19, 2026 · Maya Okonkwo · devblogs.microsoft.comRunners & infrastructureDocker VMM goes public beta with Docker Desktop's virtualizer rewritten in-house
Docker Desktop v4.86 ships a rewritten first-party virtualizer as a public beta on Mac and Windows, with Linux deferred to a GA targeted for the end of October.
Aug 19, 2026 · Maya Okonkwo · docker.comSupply chain securityThe command your agent approved is not the command that ran
A Docker write-up walks through CVE-2026-22708, a Cursor flaw where shell built-ins slipped past the agent's allowlist and quietly rewrote the environment, turning an approved git branch into arbitrary code execution. Docker's answer is to sandbox the whole agent, which shrinks the blast radius without closing every hole.
Aug 18, 2026 · Tomás Vega · docker.comIncident responseAWS wires DevOps Agent into CodePipeline failures via CloudWatch and Lambda
AWS published an integration pattern that routes CodePipeline failures to its DevOps Agent through a CloudWatch alarm and a small Lambda webhook, aimed at trimming the manual sweep across services, logs and pipeline stages when a GitHub-hosted deploy breaks.
Aug 18, 2026 · Maya Okonkwo · aws.amazon.comDeveloper experienceCloud Native Buildpacks graduates in the CNCF
The Cloud Native Buildpacks project reached graduated status at the CNCF on August 11, formalising the source-to-image build path many CI pipelines already lean on.
Aug 18, 2026 · Priya Nair · cncf.ioDeveloper experienceKYAML pins down the YAML that Kubernetes actually reads
SIG CLI's new KYAML dialect is a strict subset of YAML that quotes every string, drops block-style indentation, and stays fully parseable by the existing ecosystem. For anyone who has watched a manifest silently turn NO into false, this is the guardrail the platform has been missing.
Aug 17, 2026 · Priya Nair · kubernetes.ioCode quality & testingAI writes releases faster than your test rig can pretend to grade them
A DevOps.com column locates the real bottleneck of AI-generated code at release verification, and warns against letting one model both write and grade its own changes.
Aug 17, 2026 · Tomás Vega · devops.comSecurity & supply chainZero CVEs by default is a floor, not a moat
Docker is pitching its Hardened Images catalog as a way to make zero-CVE base images the default across your pipeline. That is a defensible floor. Treating a green scanner and a signed SBOM as the finish line is exactly how the last year of supply-chain incidents happened.
Aug 17, 2026 · Tomás Vega · docker.comSecurity & supply chainThe next scanner in your pipeline is an autonomous agent. Ask where it runs.
A devops.com opinion piece argues CI/CD security testing is going autonomous: proof-based agents that chain vulnerabilities the way an attacker would. The real design fight is whether those agents run inside your trust boundary or ship your source and secrets to somebody else's.
Aug 16, 2026 · Tomás Vega · devops.comSecurity & supply chainA devops.com walkthrough stacks four open-source security gates into GitHub Actions
devops.com published a build-it-yourself piece that stitches npm audit, Snyk, Trivy, CodeQL and OWASP ZAP into a single GitHub Actions pipeline. It is a decent map of what teams can gate on without an enterprise SKU, but stacking five scanners has an operational cost the article does not spend on.
Aug 16, 2026 · Maya Okonkwo · devops.comSupply chain securityUnsigned images meet an autonomous puller. What could go wrong.
The New Stack argues unsigned container images have always been a risk and become a bigger one when the puller is an AI agent with no human in the loop. The fix, image signing, has been on the shelf for years.
Aug 16, 2026 · Tomás Vega · thenewstack.ioIdentity and accessAzure DevOps opens a Service Connection off-ramp from PATs and build session tokens
A preview from Microsoft DevOps lets Azure Pipelines authenticate against Azure DevOps with an Entra-backed Service Connection instead of a Personal Access Token or Build Session token. The coverage is scoped: repo resources, YAML template checkouts, NuGetAuthenticate, InvokeRESTAPI and the AzureCLI task.
Aug 15, 2026 · Maya Okonkwo · devblogs.microsoft.comPlatform engineeringKairos pipeline runs a Kubernetes control-plane upgrade in eleven minutes, no operator
A CNCF case study documents a fully automated Kubernetes control-plane upgrade on immutable Kairos nodes that finished in about eleven minutes with zero human touch, using A/B partitions and GitOps to keep etcd quorum intact.
Aug 15, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chainThe pipeline is your last honest reviewer for agent-authored change
A DevOps.com opinion piece argues that when coding agents open pull requests faster than humans can read them, the CI/CD pipeline (not the reviewer) has to be the control plane for AI-authored change.
Aug 15, 2026 · Tomás Vega · devops.comDeveloper experienceGitHub's Dependabot playbook: group the version PRs, slow the cadence, keep security fast
A GitHub blog post dated 2026-07-29 lays out the three-lever config for making Dependabot survivable on a busy repo: group version updates into one PR, slow the schedule to weekly or monthly, and let security updates keep flowing on their own timing. It is a few lines of YAML that turn a bot most teams half-mute back into something they can triage.
Aug 14, 2026 · Priya Nair · github.blogDeveloper experienceGitHub adds an in-product path off branch protection rules
A GitHub changelog dated 2026-08-11 adds a one-click conversion from legacy branch protection rules into repository rulesets, done inside repo settings. If you have been putting off the migration across a fleet of repos, the tax on doing it just dropped.
Aug 14, 2026 · Priya Nair · github.blogSecurity & supply chainPacker 1.16 ships signed SLSA provenance, and a command to check it
Packer v1.16.0 emits signed SLSA Provenance v1 attestations for every machine image it builds, and adds a verify-attestation command so downstream pipelines can actually check the signature before promoting an AMI or a VM template.
Aug 14, 2026 · Tomás Vega · hashicorp.comDeveloper experienceDocker Desktop grows its own VMM, and it is now open beta
Docker moved its home-grown virtualization layer into public beta on Docker Desktop v4.86 for macOS and Windows, with Linux coming at GA. It replaces the third-party backend Docker Desktop used to lean on and is tuned specifically for container workloads.
Aug 13, 2026 · Priya Nair · docker.comSecurity & supply chainGitLab's mid-month patch train fixes a CI/CD pipeline authorization bypass
GitLab shipped 19.2.2, 19.1.4 and 19.0.6 with 13 CVEs, including an authorization bypass that let developer-role users run CI pipelines against protected branches. Self-managed operators should upgrade immediately.
Aug 13, 2026 · Maya Okonkwo · docs.gitlab.comSecurity & supply chainOne credential, three tools deep: the LiteLLM supply-chain breach
CloudSEK, in reporting picked up by devops.com, puts the LiteLLM incident at about 2,500 companies and 434,000 CI/CD pipelines. The route ran through a vulnerability scanner before it reached LiteLLM, which is where the number gets uncomfortable.
Aug 13, 2026 · Tomás Vega · devops.comDeveloper experienceCloud Native Buildpacks reaches CNCF graduation, and the no-Dockerfile path gets its stamp
The CNCF graduated Cloud Native Buildpacks on August 11, formalising a build primitive that turns source code into OCI images without a hand-written Dockerfile. For teams tired of maintaining base-image drift across every service, the endorsement lands at a useful moment.
Aug 12, 2026 · Priya Nair · cncf.ioRunners & infrastructureMulti-gigabyte image pulls are now the EKS cold-start problem
The New Stack walks through why container image pull time has become a first-class bottleneck on Amazon EKS, driven by machine-learning workloads that ship in much larger images than a typical application. Pull latency is now something CI/CD and platform teams have to design for, not wait out.
Aug 12, 2026 · Maya Okonkwo · thenewstack.ioSecurity & supply chainnpm provenance attestations get worn as camouflage in a new worm-style attack
The New Stack reports a supply-chain campaign against npm that turned the exact control CI/CD teams have started to lean on into cover. Attestations do not become useless overnight, but reading them as a green light gets harder starting now.
Aug 12, 2026 · Tomás Vega · thenewstack.ioSupply chain securityA shared agent-plugin format is a shared supply chain
OpenAI, AWS, Cursor, GitHub and Microsoft have jointly backed Agent Plugins 1.0.0, a portable package format for reusable AI-agent components. Once the same artifact runs in every vendor's agent, provenance stops being a single-runtime problem.
Aug 11, 2026 · Tomás Vega · thenewstack.ioAI in CI/CDAWS releases Dogwood, an open-source policy language for the tool-call sequences agents run
AWS has published Dogwood, an open-source policy language and reference interpreter that governs sequences of AI-agent tool calls. The pitch is catching actions that are individually valid but wrong in context, and for pipelines that hand agents commit or deploy rights that is a new place to hang guardrails.
Aug 11, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineeringGKE's ClusterNetworkPolicy gives platform teams a floor without stepping on namespace owners
Google Cloud is previewing ClusterNetworkPolicy in GKE, a cluster-scoped resource with an Admin, NetworkPolicy and Baseline tier stack. It lets platform teams set a non-negotiable isolation floor while namespace-scoped NetworkPolicies keep working underneath.
Aug 11, 2026 · Priya Nair · cloud.google.comSecurityCodeQL 2.26.2 trims what counts as safe: fresh alerts incoming
GitHub's static analysis engine adds Swift 6.3.3 and Kotlin 2.4.10 support in CodeQL 2.26.2, and quietly removes a batch of sanitizers that used to make path injection and URL redirection findings disappear.
Aug 10, 2026 · Tomás Vega · github.blogAI in CI/CDGoogle opens Gemini Enterprise Agent Ready as a free training path for agents in production
Google Cloud has announced Gemini Enterprise Agent Ready, a no-cost training bundle of twelve skill badges on skills.google paired with a month-long hackathon on Devpost. The angle for CI/CD teams is that the courses aim at operating agents, not demoing them.
Aug 10, 2026 · Maya Okonkwo · cloud.google.comSupply-chain securityRapidFort points its hardened open-source business at what actually runs in production
At Black Hat USA, RapidFort announced RapidFort Runtime, a read-only monitor for the production environments that consume its curated open-source packages. For CI/CD teams the pitch targets the long-standing measurement gap between what a pipeline shipped and what is executing in the cluster.
Aug 10, 2026 · Maya Okonkwo · devops.comDeveloper experience'Governance is a developer experience problem': a Docker Captain reframes AI-agent trust
A Docker Captain argues in a new post that AI-agent governance stalls on trust, not capability, and that the platforms which win will be the ones that draw clear boundaries so developers do not have to reason about controls each time they ship. The DX framing is mostly right; the invisible-controls part is where the next incident hides.
Aug 9, 2026 · Tomás Vega · docker.comDeveloper experienceGitHub's native stacked pull requests land in public preview
GitHub is rolling out native stacked pull requests in public preview: one big change split into a chain of dependent, layer-sized PRs, with a stack map on each one and a merge that lands every layer beneath the latest ready PR in a single operation. Branch protections and required status checks still apply, merge queue support is coming in over the following weeks, and there is a new gh-stack CLI.
Aug 9, 2026 · Priya Nair · devops.comSecurity & supply chainCNCF's shadow-AI post makes the case for treating agents as identities
A new CNCF community post from Matteo Bisi at ReeVo argues for treating AI tools in the CI/CD pipeline as privileged identities, and maps the threat model plus available open-source controls stage by stage. The gap it names: no CNCF graduated project owns end-to-end AI governance yet.
Aug 9, 2026 · Tomás Vega · cncf.ioPlatform engineeringWhere the controller-runtime cache bites you: stale reads, missing indexes, unbounded watches
A revised kubernetes.io deep dive walks through the local cache every kubebuilder-based controller depends on. The operational read: r.Get and r.List never touch the API server, and that is where a class of quiet controller bugs actually lives.
Aug 8, 2026 · Maya Okonkwo · kubernetes.ioSecurity & supply chainGitLab wires Anthropic's Claude security tooling into its pipeline via MCP
GitLab has published its take on how Anthropic's Claude security tooling hands work off to the GitLab pipeline through the GitLab MCP server. The division of labour is tidy on a slide and messier the moment you draw the trust boundary.
Aug 8, 2026 · Tomás Vega · about.gitlab.comCloud securityGoogle Cloud spells out its abuse-response ladder: throttle, isolate, suspend
A Google Cloud security-team post consolidates how the platform reacts when a tenant workload starts leaking credentials, mining crypto, or burning a stolen API key. For pipeline owners the operational read is the escalation path, and how easily a shared project can end up on it.
Aug 8, 2026 · Maya Okonkwo · cloud.google.comIncident responseAWS DevOps Agent talks to ServiceNow over MCP, reads incidents and writes findings back
AWS published a walkthrough showing its DevOps Agent connecting to ServiceNow as an MCP client and using the ServiceNow MCP Server to pull incident, CMDB and change context, then writing correlated analysis back into the incident record. The same wire lets the agent open change requests through ServiceNow's Action Fabric under OAuth 2.0.
Aug 7, 2026 · Maya Okonkwo · aws.amazon.comInfrastructure as codeAWS's new IaC MCP server lets your AI assistant lint CloudFormation and correlate CloudTrail
AWS has published a walkthrough of an Infrastructure as Code MCP Server that exposes four tools to any MCP-compatible AI assistant: CloudFormation docs search, cfn-lint validation, cfn-guard compliance checks, and CloudTrail-correlated troubleshooting. Kiro is the assistant AWS uses in the demo.
Aug 7, 2026 · Priya Nair · aws.amazon.comIncident responseGitHub pauses the Kimi K3 rollout in Copilot while it works a GitHub Actions incident
GitHub says the general-availability rollout of Kimi K3 in Copilot is temporarily paused while it mitigates an incident with GitHub Actions, per an editor's note added to the August 6 changelog. Pricing has been published; the resume time has not.
Aug 7, 2026 · Maya Okonkwo · github.blogSecurity & supply chainGitLab Secrets Manager reaches beyond CI jobs to ESO, Terraform, and an API
GitLab has pushed its Secrets Manager into public beta with three new consumers beyond CI jobs: External Secrets Operator for Kubernetes, a Terraform/OpenTofu data source, and a Vault-compatible API. OpenBao powers it under the hood.
Aug 6, 2026 · Tomás Vega · about.gitlab.comInfrastructure as codeHashiCorp reframes HCP Terraform as the accountability layer for AI agents
An August 5 HashiCorp post maps five existing HCP Terraform capabilities (provenance, policy, identity, isolation, audit) onto the workflow of AI agents that author and apply Terraform. Nothing in the post is a new launch: the pitch is that the wiring is already there.
Aug 6, 2026 · Maya Okonkwo · hashicorp.comPlatform engineeringOpenCost 1.121.0 pins a dollar figure to every model and token on Kubernetes
OpenCost 1.121.0, announced on the CNCF blog on August 5, adds per-model and per-token cost attribution for AI inference workloads. The release aims at platform teams that have been reading GPU bills and token counters in separate windows with no way to connect them.
Aug 6, 2026 · Maya Okonkwo · cncf.ioDeveloper experienceAzure DevOps ships a hosted MCP endpoint you don't have to run
Microsoft moved the Azure DevOps MCP Server to general availability as a hosted endpoint over streaming HTTP, so AI assistants can reach work items, repos, PRs and pipelines without a local server to babysit.
Aug 5, 2026 · Priya Nair · devblogs.microsoft.comPlatform engineeringGateway API v1.6 promotes TCPRoute and UDPRoute to Standard, and puts a clock on the v1alpha2 shapes
The June 30 release of Kubernetes Gateway API v1.6 graduates raw L4 TCPRoute and UDPRoute to the Standard channel under v1, deprecates their v1alpha2 counterparts, and moves remaining experimental resources into a separate API group so the boundary between stable and unstable shapes stops being a naming convention.
Aug 5, 2026 · Maya Okonkwo · kubernetes.ioSecurity & supply chainApple's answer to AI security slop is a rate limit, not a rubric
Apple has begun capping how many security reports some researchers can have open in its portal at once, with a wait of up to 30 days before filing the next one after hitting the cap. The trigger, per The New Stack, was a flood of AI-assisted submissions that were not genuine vulnerabilities.
Aug 4, 2026 · Tomás Vega · thenewstack.ioAI in CI/CDGitHub Copilot retires six models on September 1, and every Copilot surface is in scope
GitHub is deprecating Gemini 3.1 Pro, Claude Opus 4.5, Claude Opus 4.6, Claude Sonnet 4.5, Claude Sonnet 4.6 and Raptor Mini across all Copilot experiences on September 1, 2026, per its July 31 changelog. Individual annual subscribers keep Sonnet 4.6; everyone else has about four weeks to point workflows and integrations at replacements.
Aug 4, 2026 · Maya Okonkwo · github.blogSecurity & supply chainOmdia's 2026 supply-chain survey puts the annual-incident rate at 77 percent
A Docker-sponsored Omdia report pegs the twelve-month software supply-chain incident rate at 77 percent of surveyed organizations, with AI technology now ranked as the top supply-chain risk. The tool-effectiveness table rewards the sponsor's product category.
Aug 4, 2026 · Maya Okonkwo · docker.comSecurity & supply chainCISA's new OSS guidance puts a four-letter scoreboard next to every dependency you ship
The CISA report 'Open Source Software: Security Principles and Practices' argues open source can be as safe as proprietary software, provided consumers score each component against a C4 framework (Codebase, Community, Conduct, Configuration). For any CI/CD team selling into regulated buyers, that scoreboard is going to arrive as an audit checklist.
Aug 3, 2026 · Tomás Vega · devops.comPlatform engineeringThe Kubernetes v1.37 sneak peek gives you three deprecations to diary now
The release team's preview for v1.37 flags a three-release deprecation clock on kube-proxy ipvs mode, a rule that Static Pods can no longer reference Secrets or ConfigMaps, and the removal of the --filename flag on kubectl run. It also reprises the still-live cgroup v1 tripwire that stops kubelet from booting.
Aug 3, 2026 · Priya Nair · kubernetes.ioDeveloper experienceLooker starts running the 'which slice moved' hunt before you open the dashboard
Looker Agentic Workflows, a preview capability available in Looker version 26.08 and later, wires a background agent to a business metric and, when a threshold is crossed, runs a Key Driver Analysis over the underlying model and posts the diagnostic summary to Slack or email with a link back to Conversational Analytics. Setup is by natural-language prompt, gated on the chat_with_agent and create_alerts permissions.
Aug 3, 2026 · Priya Nair · cloud.google.comIncident responseBuilding your own AI SRE moves the toil; it does not remove it
Chronosphere leaders argued in The New Stack that engineering teams should build their own AI SRE to map systems, investigate incidents and support reliable delivery at scale. The operational read is narrower: an in-house AI SRE is a second production system with its own on-call, its own change-management story and its own place in the audit trail.
Aug 2, 2026 · Maya Okonkwo · thenewstack.ioSecurity & supply chainCISA rewrites the SBOM floor: hashes are required, and the scope now covers AI and SaaS
The 2026 Minimum Elements guidance from CISA replaces the 2021 NTIA baseline, adds required hash, license and generation-context fields to every SBOM, renames Supplier Name to Component Producer, and extends the floor to open-source software, AI systems and software-as-a-service. For platform teams the practical consequence is that SBOM work stops living inside the build step and starts spilling into vendor contracts and runtime re-validation.
Aug 2, 2026 · Maya Okonkwo · devops.comInfrastructure as codeTerraform workspaces and Stacks get a 30-day restore in HCP Terraform and Terraform Enterprise 2.0.0
The July 23 release lands a Recoverable Items page for deleted workspaces and Stacks with a 30-day window, promotes monorepo support for Stacks to GA, and adds project- and workspace-scoped policy override permissions. A guided CLI migration from workspaces to Stacks ships in public beta.
Aug 2, 2026 · Maya Okonkwo · hashicorp.comSecurity & supply chainAlloyDB puts agents behind IAM groups so nobody has to share a database password again
Google's managed Postgres is adding IAM group authentication in preview, mapping Cloud Identity and Workforce Identity Federation groups to database roles. The point is not the passwordless slogan: it is that AI agents can finally carry a real end-user identity all the way to the row filter.
Aug 1, 2026 · Tomás Vega · cloud.google.comSecurity & supply chainDocker Hub gets OIDC federation for GitHub Actions, retiring the PAT-in-a-secret pattern
Docker has added OpenID Connect authentication for GitHub Actions on Team, Business and Docker Hardened Images plans, so workflows push and pull images with a short-lived per-run token instead of a stored Personal Access Token. It closes off one of the last static credentials still sitting in most Actions repos.
Aug 1, 2026 · Maya Okonkwo · docker.comSecurity & supply chainnpm walls off 2FA-bypass tokens from account and package management
As of July 31, npm granular access tokens configured to bypass 2FA can no longer perform sensitive account, organisation or package management actions. Those calls now demand an interactive 2FA challenge, and the same tokens are on a January 2027 timer to lose direct publish rights too.
Aug 1, 2026 · Tomás Vega · github.blogSupply chain securityImage verification, one layer below admission
A CNCF post outlines a Node Resource Interface plugin that verifies SLSA, VEX and VSA attestations at CreateContainer time inside the container runtime, closing gaps that admission webhooks can miss.
Jul 31, 2026 · Tomás Vega · cncf.ioDeveloper experienceCopilot in VS Code gives each agent session its own git worktree
GitHub's Copilot July 2026 release notes for VS Code cover versions 1.127 through 1.131 and land a redesigned Agents window that can start a Copilot, Claude, or Codex session in an isolated git worktree, plus multi-chat inside one session and a bang-prefix that runs the chat line as a terminal command. Copilot vision is now generally available.
Jul 31, 2026 · Priya Nair · github.blogPlatform engineeringKubernetes 1.37 beta lands a StatefulSet Recreate strategy and CRI pod checkpoint RPCs
The 1.37.0-beta.0 release adds a Recreate update strategy for StatefulSets, promotes PLEGOnDemandRelist and metrics.k8s.io to v1, and pushes pod checkpoint and restore into the CRI interface. A 1.36.3 patch shipping in the same window catches a kubelet memory-leak regression that first landed in 1.36.
Jul 31, 2026 · Maya Okonkwo · lwkd.infoPlatform engineeringGoogle's borderless lakehouse wires AWS, Databricks and Snowflake catalogs into one Iceberg REST surface
Google Cloud has pushed a preview of catalog federation that lets BigQuery and Managed Spark read AWS Glue, Databricks Unity Catalog and Snowflake Horizon through an Iceberg REST catalog, and shipped an open-source Data Agent Kit that hands the same tables to MCP-speaking agents. For pipeline teams the practical shift is that the protocol coding agents already talk now reaches a synchronised view of a multi-cloud data estate.
Jul 30, 2026 · Priya Nair · cloud.google.comSecurity & supply chainGTIG and Mandiant publish a supply-chain hardening playbook aimed at CI/CD teams
Google's Threat Intelligence Group and Mandiant have released a joint guide on defending against software supply chain compromise, mapping four control categories onto the concrete pipeline levers most teams already own: short-lived tokens, ephemeral runners, package cooldowns and dependency verification.
Jul 30, 2026 · Tomás Vega · cloud.google.comSecurity & supply chainOpenAI open-sources the Codex Security CLI and keeps the scanner in-house
OpenAI has released the Codex Security CLI and SDK under Apache 2.0, wiring pre-commit and CI scanning into the merge path with configurable severity gates. The scanning backend and the agent that produces threat models and patches remain proprietary and available only to a limited-beta allowlist.
Jul 30, 2026 · Tomás Vega · devops.comSecurity & supply chainDocker returns to its coding-agent series with an argument shaped like a CI problem: no layer between the agent and the host
The second entry in Docker's Coding Agent Horror Stories, published on July 20, argues that a coding agent runs under the developer's filesystem permissions and credentials with nothing isolating it from the host by default. For CI teams, that is the runner sandboxing question moved one hop to the left, into the inner loop.
Jul 29, 2026 · Maya Okonkwo · docker.comPlatform engineeringKyverno's CLI learns to fake production so offline policy tests stop lying
A CNCF blog post walks through how the Kyverno CLI now stands up an in-memory fake of the Kubernetes API cache, so policies that lean on GlobalContextEntry lookups can be exercised offline instead of silently skipping. The workflow that used to say 'all pass' when it really meant 'never ran' has finally closed.
Jul 29, 2026 · Priya Nair · cncf.ioSecurity & supply chainDocker's fourth horror story revisits the Nx post-install hook that drained CI secrets
The fourth installment of Docker's Coding Agent Horror Stories, published July 28, revisits the August 2025 s1ngularity compromise of the Nx npm package. The lesson for CI/CD teams has nothing to do with coding agents. It is about the post-install hook that ran telemetry.js on every runner that pulled the package.
Jul 29, 2026 · Tomás Vega · docker.comSecurity & supply chainGitHub Actions freezes suspected-malicious workflow runs until a human signs off
GitHub has flipped Actions into a hold-first posture for workflow runs it flags as potentially malicious on public repositories: the run pauses until a collaborator with write access approves it from an authenticated web session. The change targets a wave of credential-theft attacks that push booby-trapped workflow files with stolen tokens.
Jul 28, 2026 · Tomás Vega · github.blogRunners & infrastructureLinkerd federation keeps the app running when a whole Kubernetes cluster dies
A CNCF walk-through by Dominik Táskai wires three GKE clusters into a full-mesh Linkerd multicluster and kills one. The nine-pod frontend rebalances across the surviving six with no application changes, but the setup pays a real price at the VPC, node-count and controller layers.
Jul 28, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chainPyPI stops accepting late file uploads to releases older than 14 days
PyPI will no longer accept new files uploaded to a release once that release is more than 14 days old, closing a stealth path a compromised publishing token could otherwise use to graft malicious code onto an established package. PyPI has said it is not yet aware of the technique being used in a real attack.
Jul 28, 2026 · Maya Okonkwo · devops.comPlatform engineeringCloud Run moves regional failover out of the runbook and into the load balancer
Google Cloud has added readiness probes and an aggregated service-health signal that lets Cloud Run automatically shift traffic away from an unhealthy region within seconds, per a July 20 post. For teams carrying a manual regional failover runbook, the operational read is which step leaves the on-call rotation.
Jul 27, 2026 · Maya Okonkwo · cloud.google.comPlatform engineeringMCP's next release candidate drops sessions and the handshake, pushes state into handles
The next Model Context Protocol release candidate removes sessions and the initialization handshake and shifts state into handles, moving remote MCP servers toward a stateless HTTP shape. Lead maintainers froze the release ahead of the rewrite, and it invalidates assumptions many existing server implementations were built on.
Jul 27, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineeringGoogle's pitch: put Agent Substrate on top of GKE Agent Sandbox, and call it the AI-agent runtime
Two months after GKE Agent Sandbox went GA in May 2026, Google introduced a follow-up called Agent Substrate in the same post. The New Stack's read is that Google now wants Kubernetes to be the runtime for AI agents on the primitives GKE already uses for production services.
Jul 26, 2026 · Maya Okonkwo · thenewstack.ioCode quality & testingSignadot's Kafka routing-key trick: one broker, many parallel tests
The New Stack details how Signadot extends its ephemeral-environments pattern into Kafka. A routing key rides each message, producers stamp it, consumers filter on it, and tagged test traffic can share a broker with stable traffic instead of forcing a broker per branch.
Jul 26, 2026 · Priya Nair · thenewstack.ioDeveloper experienceThe pull request is twenty, and moving review upstream is the shift I keep quietly rooting for
The New Stack argues code review should move upstream of the code itself, calling the pull request roughly twenty years old and asking whether the diff is still the right venue to catch a problem. After a year of my best reviews happening in shared docs before any branch existed, I mostly agree.
Jul 26, 2026 · Priya Nair · thenewstack.ioSecurity & supply chainConfidential Containers hits CNCF incubation, and every pipeline is on notice
The CNCF Technical Oversight Committee voted Confidential Containers into incubation on July 22, moving TEE-backed pods one step closer to being a normal part of the Kubernetes stack. If your pipeline already signs and attests images, the runtime side is about to demand the same discipline.
Jul 25, 2026 · Tomás Vega · cncf.ioDeveloper experienceCopilot code review picks up a firewall, custom runners, and head-branch instructions
GitHub's Copilot code review can now run with a firewall, custom setup steps and independent runner configurations, and custom instructions are read from the pull request's head branch rather than the base branch.
Jul 25, 2026 · Priya Nair · github.blogPlatform engineeringFour hyperscaler agent sandboxes, four different isolation primitives
A New Stack survey argues AWS, Google Cloud, Microsoft Azure and Cloudflare have each shipped an agent-sandbox service, built on four different isolation foundations. Google Cloud's Cloud Run sandboxes public preview, announced at the WeAreDevelopers World Congress, is the news peg.
Jul 25, 2026 · Maya Okonkwo · thenewstack.ioSecurity & supply chainFakeGit floods GitHub with malicious repos aimed at coding agents
Island researchers say a campaign called FakeGit spun up about 7,600 malicious GitHub repositories, many posing as AI skills or MCP servers, to hand SmartLoader and StealC to developers and to the agents fetching capabilities on their behalf.
Jul 24, 2026 · Maya Okonkwo · devops.comPlatform engineeringGitHub's MCP Server tracks the stateless MCP spec, and the Redis session drops out
Ahead of a 28 July 2026 move to a stateless MCP core, GitHub says its MCP Server has been updated to run without per-session Redis state. For teams wiring coding agents into CI, that changes what the server has to remember between calls.
Jul 24, 2026 · Maya Okonkwo · github.blogSecurity & supply chainAuditors, OIDC and the trust policy most teams get wrong
A DevOps.com walkthrough by Artur Yolchyan lays out a SOC 2-shaped CI/CD pipeline on GitHub Actions and AWS: multi-account isolation, OIDC federation locked to one repo and branch, and the same container image retagged all the way to production. The interesting part is not the account topology; it is the one line in the trust policy that decides who can talk to your ECR.
Jul 24, 2026 · Tomás Vega · devops.comDeveloper experienceCircleCI's CLI is now a Go rewrite with an MCP server bolted on
CircleCI announced a ground-up Go rewrite of its CLI on July 7, shipped as 1.0 beta with predictable JSON on every command, a browser OAuth login, a debugging TUI and a built-in MCP server for Claude, Cursor and VS Code. It is a small announcement with an outsized effect on anyone who has watched a coding agent flail through unstructured CLI output.
Jul 23, 2026 · Priya Nair · circleci.comRunners & infrastructureThe 60% idle GPU that turned out to be a network policy
A CNCF write-up walks through a distributed Kubeflow training job whose GPUs sat around 60% idle while every pod reported healthy. The failure lived one layer down, in a Cilium policy enforcing zone boundaries that gradient sync had to cross.
Jul 23, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chainPillar research says the AI coding agent sandbox leaks through trusted files
Pillar Security researchers demonstrated multiple sandbox-bypass techniques against AI coding agents, plus prompt-injection attacks hidden in READMEs, code comments and dependencies. OpenAI, Google and Cursor have patched several of the reported flaws.
Jul 23, 2026 · Maya Okonkwo · devops.comCode quality & testingGitHub Code Quality goes GA, and the billing meter turns on with it
GitHub Code Quality moved to general availability on GitHub Enterprise Cloud and GitHub Team on July 20, pairing CodeQL's analysis with AI-assisted detection and Copilot Autofix inside pull requests. The pricing landed the same day: $10 per active committer per month plus usage charges for AI work and CodeQL compute.
Jul 22, 2026 · Tomás Vega · github.blogSecurity & supply chainTime-to-exploit went negative. Mandiant maps where AI helps the vulnerability queue, and where it fails silently.
Google Cloud's Mandiant team pins mean time-to-exploit at negative seven days and publishes a blueprint for aiming large language models at the vulnerability pipeline. The failure modes it lists are the ones that let the exploit through.
Jul 22, 2026 · Tomás Vega · cloud.google.comSecurity & supply chainThe npm worm that shipped with valid SLSA provenance
A DevOps.com analysis of the Miasma npm worm makes an uncomfortable case: signing and provenance told the honest truth, and the pipeline still shipped malware. When the build platform itself is the attack surface, a green attestation is a description of the failure, not a defence against it.
Jul 22, 2026 · Tomás Vega · devops.comSecurity & supply chainCodeMender opens in preview: Google Cloud puts an agent on the security fix
Google Cloud has opened a preview of CodeMender, a managed agent that both scans code and proposes remediations, delivered through the Gemini Enterprise Agent Platform and AI Threat Defense. It puts a fresh trust question in front of every CI/CD team: which security fixes are safe to auto-apply, and where does a human still sign?
Jul 21, 2026 · Tomás Vega · cloud.google.comSecurity & supply chainSecret scanning custom patterns get a REST API, so you can PR your detectors
GitHub made REST endpoints for secret scanning custom patterns generally available on July 13, 2026. Detectors can now be created, listed, updated and deleted via API at repository, organization and enterprise scope, though dry runs and the final publish step still happen in the UI.
Jul 21, 2026 · Priya Nair · github.blogSecurity & supply chainxAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys
Three days after a researcher demonstrated the Grok Build CLI silently uploading SSH keys and repository contents to xAI's cloud, xAI dropped the agent's full source on GitHub under Apache 2.0. The code is now inspectable. The trust model is a different question.
Jul 21, 2026 · Tomás Vega · devops.comRunners & infrastructureGPUs keep falling off the PCIe bus, and standard node health does not notice
AWS engineers write up what running Kubernetes at Amazon EKS scale taught them about GPU node failure, and why the default node health model has nothing to say when the GPU just vanishes from the bus.
Jul 20, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineeringHashiCorp's tfpolicy pulls policy-as-code back inside Terraform
HashiCorp introduced tfpolicy, a policy-as-code framework built into Terraform with rules written in HCL, now in public beta on HCP Terraform. For platform teams currently running Sentinel, OPA or Conftest alongside every plan, the change collapses one language and one runtime out of the pipeline.
Jul 20, 2026 · Maya Okonkwo · devops.comSecurity & supply chainServerless without a front door: Mandiant's hardening checklist for exposed Cloud Run functions
Google Cloud's Mandiant team published a hardening guide for teams shipping public serverless functions that carry no authentication. Its recommendations put a load balancer, per-function IAM, and pipeline-side security scanning between the internet and your code.
Jul 20, 2026 · Tomás Vega · cloud.google.comSecurity & supply chainThe workstation is in scope now
A DevOps.com essay argues the laptop that pushes commits belongs inside the supply-chain threat model, citing the Megalodon campaign that injected malicious GitHub Actions workflows into thousands of repositories and a separate malicious VS Code extension incident. What CI-side controls actually catch this, and where the pipeline runs out of leverage.
Jul 19, 2026 · Tomás Vega · devops.comPlatform engineeringPreview environments were built for humans. The traffic changed.
A new essay reframes preview and staging environments as a traffic-shaped workload rather than a ticket queue, now that coding agents open pull requests in bursts. Platform teams facing agent-speed demand have to treat environment provisioning as capacity planning.
Jul 19, 2026 · Priya Nair · thenewstack.ioRunners & infrastructureXcode 27 lands on GitHub-hosted runners, and the naming rule quietly changed
GitHub Actions added an Xcode 27 image in public preview on its arm64 macOS runners. The bigger shift is buried in the changelog: images are now keyed to the Xcode major version instead of the OS, one Xcode per image.
Jul 19, 2026 · Priya Nair · github.blogDeveloper experienceGitLab Duo CLI hits GA: the Duo Agent Platform lands in the terminal
GitLab Duo CLI reached general availability with GitLab 19.2, bringing Duo Agentic Chat into the shell with interactive and headless modes and sessions shared across the UI and editor extensions.
Jul 18, 2026 · Priya Nair · about.gitlab.comSecurity & supply chainOpenAI ships GPT-Red to automate prompt-injection testing against AI agents
OpenAI has released GPT-Red, a tool that automates prompt-injection testing against AI agents, per The New Stack. The framing is straightforward: once agents take real actions on real systems, manual red-teaming stops being enough.
Jul 18, 2026 · Tomás Vega · thenewstack.ioDeployment strategiesProgressive rollouts are solved. The validation gate isn't.
A New Stack opinion argues that progressive rollouts are a solved problem while the validation step that actually gates them is still hand-built. From an on-call chair, that reframing is overdue.
Jul 18, 2026 · Maya Okonkwo · thenewstack.ioSupply chain securityGitLab tries to auto-fix the transitive-dep problem it keeps quantifying
GitLab has moved Dependency Scanning Auto-Remediation into beta, aimed squarely at the transitive supply-chain risk it just spent a research cycle measuring. The interesting question is not whether the fix ships, but whether anyone downstream trusts the bot enough to merge it.
Jul 17, 2026 · Tomás Vega · about.gitlab.comPlatform engineeringGitLab packages Duo Agent Flows so multi-step runs share the platform's controls
GitLab is naming a shape for multi-step agent work, Duo Agent Flows, that inherits the same access controls, triggers and review gates as any other pipeline object. The pitch is a middle ground between chat that only answers and homegrown scripts that go stale the moment the platform changes.
Jul 17, 2026 · Maya Okonkwo · about.gitlab.comCode quality & testingGitLab Duo Security Review Flow goes after the logic bugs SAST leaves on the floor
GitLab moved Security Review Flow into public beta on the Duo Agent Platform. You add it to a merge request like a human reviewer, and it focuses on authorization and business-logic bugs that pattern-based scanners typically miss.
Jul 17, 2026 · Priya Nair · about.gitlab.comDeveloper experienceGitHub tags AI-generated code scanning alerts on the PR itself
Code scanning now surfaces AI-powered security detections directly on pull requests, tagged next to CodeQL findings so reviewers can tell them apart. The alerts are informational and never block a merge, but they finally land where reviewers already look.
Jul 16, 2026 · Priya Nair · github.blogSupply-chain securityCordyceps: when a stranger's pull request runs as a maintainer
Researchers at Novee catalogue Cordyceps, a class of CI/CD supply-chain exploit where pull requests and comments from untrusted contributors get executed with maintainer permissions. A scan of 30,000 high-impact repositories flagged 654 candidates and confirmed over 300 as fully exploitable, with named blast radius inside Microsoft, Google, Apache and Cloudflare.
Jul 16, 2026 · Tomás Vega · devops.comKubernetesVault Kubernetes KMS enters public beta, aiming at the etcd key sprawl
HashiCorp put a Kubernetes KMS v2 plugin for Vault Enterprise into public beta, letting the API server encrypt etcd through the same Vault install that already holds pipeline secrets. It collapses one more custody trail; it does not lower the operational burden on the API server side.
Jul 16, 2026 · Maya Okonkwo · hashicorp.comIncident responseAWS teaches its DevOps Agent to open the pull request too
An AWS DevOps Blog walk-through chains the AWS DevOps Agent with the Kiro CLI so incident findings become a pull request instead of a Slack thread. The pipeline still gates on human approval, but who wrote the diff has changed, and so has what your review is actually catching.
Jul 15, 2026 · Tomás Vega · aws.amazon.comSecurity & supply chainGitHub pulls /security-review out of the CLI and into the Copilot app
GitHub's /security-review slash command is now in public preview inside the Copilot app, running a security pass on in-flight code changes before they ever reach a pull request. It is the same review that was already in the Copilot CLI, moved closer to where the code is being written.
Jul 15, 2026 · Tomás Vega · github.blogSupply chain securityDependabot learns to wait: version-update PRs now sit for three days by default
GitHub is flipping Dependabot version updates to a default three-day package cooldown. A new release has to sit on its registry for at least three days before Dependabot will open a version-update PR; security updates are exempt and still open immediately.
Jul 15, 2026 · Tomás Vega · github.blogDeveloper experienceAutofix that reads more than one file: GitHub previews agentic code scanning fixes
GitHub's agentic autofix for code scanning alerts is in public preview, expanding remediation from the alert location out to the files around it. For CI/CD teams, a single alert now maps to a codebase-shaped change instead of a one-line patch.
Jul 14, 2026 · Priya Nair · github.blogSecurity & supply chainDatadog says months-long GitHub recon out of dormant 'ghost' accounts is prep for supply-chain attacks
Datadog security researchers say overlapping months-long campaigns have been abusing GitHub's public API and reactivating more than 50 long-dormant accounts to map organizations and their engineers. The setup looks a lot like the reconnaissance phase of a supply-chain intrusion.
Jul 14, 2026 · Maya Okonkwo · devops.comSecurity & supply chaink8s-aibom writes down the AI your cluster is already running
Google Cloud open-sourced k8s-aibom, an unprivileged Kubernetes controller that watches the cluster API for inference runtimes and agent frameworks and emits OWASP CycloneDX ML-BOMs from what it finds. The bet is that shadow-AI inventory is easier to solve from outside the workload than by asking developers to fill in a form.
Jul 14, 2026 · Tomás Vega · cloud.google.comDeveloper experienceCodex lands in JetBrains: an in-IDE agent slot, and less config to babysit
GitHub's Copilot integration for JetBrains adds Codex as an agent provider in public preview, moves hook and MCP server management into the editor, and now honours admin-configured custom models. Here is what a JetBrains user should try first, and where the preview edges still show.
Jul 13, 2026 · Priya Nair · github.blogSupply-chain securityThe five-minute SBOM sniff test earns its keep
A quick, deliberate look at the bill of materials for a hardened image catches supply-chain trouble a CVE scanner will never flag. Bolt it into the pipeline, not the compliance report.
Jul 13, 2026 · Tomás Vega · thenewstack.ioSupply-chain securityHalluSquatting: the dependency your agent invented, and the attacker who registered it first
Researchers from Tel Aviv University, the Technion, and Intuit describe a supply-chain pattern, HalluSquatting, that turns an AI coding agent's tendency to hallucinate package and repository names into a delivery channel for remote code execution and botnet payloads. The novelty is in the delivery, not the malware.
Jul 13, 2026 · Tomás Vega · devops.comRunners & infrastructureAWS puts gray zone failures into the EKS control loop
The New Stack details how AWS treats non-obvious availability zone degradation as its own category on EKS, with zonal shift moving traffic away from an impaired zone before the traditional alarms fire. For CI/CD teams, it reframes what a regional resilience test needs to cover.
Jul 12, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineeringGitHub lets enterprises pin Copilot's OpenTelemetry endpoint
A new enterprise-managed setting mandates where the Copilot Chat extension in VS Code and Copilot CLI send OpenTelemetry data. The managed value overrides environment variables and user settings.
Jul 12, 2026 · Maya Okonkwo · github.blogPlatform engineeringEntire opens preview of regional Git mirrors aimed at AI-agent clone traffic
Ex-GitHub CEO Thomas Dohmke's new company Entire launched a preview of a distributed Git network that mirrors GitHub repositories across the US, Europe and Australia. The pitch is per-region clone throughput for AI coding agents; the mechanism today is read replicas, not a new protocol.
Jul 12, 2026 · Maya Okonkwo · devops.comPlatform engineeringAfter the ingress-NGINX retirement, what your migration plan owes production
The Kubernetes SIG Network retired ingress-nginx in March 2026, leaving clusters still on it exposed to unpatched CVEs and stalled feature work. A CNCF post lays out the two migration paths operators are picking between and the tooling to make the move.
Jul 11, 2026 · Maya Okonkwo · cncf.ioSupply-chain securityInnersource security advisories go GA: a private channel for private vulns
GitHub Advanced Security now lets enterprise customers publish security advisories that stay inside the enterprise, and Dependabot picks them up like it would a public CVE. Useful, narrow, and only as good as the discipline behind it.
Jul 11, 2026 · Tomás Vega · github.blogDeveloper experienceA running cost meter and an MCP tripwire land in Visual Studio's June update
Visual Studio's June Stable Channel update adds a real-time Copilot usage window with configurable alerts and a trust check that pauses MCP servers whose configuration has changed between sessions. Both arrive in the same weeks engineers have been posting screenshots of surprise Copilot invoices after GitHub moved to usage-based billing on June 1.
Jul 11, 2026 · Priya Nair · devops.comPlatform engineeringGoogle puts Cloud Run sandboxes into preview for AI-generated code
Google Cloud has moved Cloud Run sandboxes to public preview, positioning them as a runtime for AI-generated code and untrusted binaries that a pipeline would otherwise be asked to trust with host access and cloud credentials.
Jul 10, 2026 · Maya Okonkwo · cloud.google.comSecurity & supply chainGhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path
Researchers at Google-owned Wiz disclosed GhostApproval, a class of flaw across six AI coding tools in which symbolic links redirect the agent's file writes while the human approval prompt shows the pre-resolution path. The mechanism is thirty years old; the CI/CD lesson is newer.
Jul 10, 2026 · Tomás Vega · devops.comAI in CI/CDGitLab shipped a real migration with AI agents and wrote up what actually broke
GitLab's engineering post walks through using its Duo agents to unify two rate-limiting paths across 121 keys and 95 call sites, wrapped in a spec-and-review loop with one honest shadow-mode incident along the way. Here is what a DX-minded reader can lift from it.
Jul 10, 2026 · Priya Nair · about.gitlab.comPlatform engineeringetcd v3.7 adds a streaming range API and drops the legacy v2 store
SIG etcd shipped v3.7.0 with a RangeStream API that chunks large read responses instead of buffering them, plus faster lease handling under load and the removal of the legacy v2 backing store. Kubernetes will expose the feature in v1.37 behind a gate.
Jul 9, 2026 · Maya Okonkwo · kubernetes.ioSupply chain securitynpm v12 flips install-time to closed-by-default
npm v12 shipped as latest on July 8, 2026, with lifecycle scripts, git-URL dependencies and remote-URL dependencies all off by default at install time. Alongside it, the 2FA-bypass Granular Access Token starts a two-step retirement that ends direct publishes.
Jul 9, 2026 · Tomás Vega · github.blogSecurity & supply chainsetup-java 5.5.0 adds JDK signature verification, if you remember to enable it
GitHub's actions/setup-java 5.5.0 adds opt-in GPG signature verification for downloaded JDKs, plus a Kona distribution parameter and a set of Maven quality fixes. It closes a real supply-chain gap for Java CI jobs, but existing pipelines keep pulling unsigned JDKs until someone flips the switch.
Jul 9, 2026 · Tomás Vega · github.blogSecurity & supply chainThe SBOM you can trust is the one your build actually made
Docker published a guide arguing that SBOMs generated at build time beat post-build scans on completeness, accuracy and freshness. The distinction quietly changes what a CI pipeline is on the hook for.
Jul 8, 2026 · Tomás Vega · docker.comSupply-chain securityPolinRider keeps expanding, and the postinstall still lands on your runner
DevOps.com reports two DPRK-linked groups are expanding PolinRider, a supply-chain campaign that pushes malicious packages into developer workflows through long-running fake-interview scams. Socket and Rescana are named as the vendors doing the attribution. The pipeline lesson is old, and unfinished.
Jul 8, 2026 · Tomás Vega · devops.comIdentity and accessVercel buys Better Auth on the pitch that agents need their own login
Vercel has acquired Better Auth, framed as a bet that AI agents opening PRs, reviewing code and creating deployments should hold first-class identity of their own. For CI/CD platforms, that reopens the question of what the merge and deploy gates are actually verifying.
Jul 8, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineeringSandboxing your agent isn't the hard part, keeping it cheap is
A CNCF post from Solo.io's Lin Sun argues Kubernetes' agent-sandbox project delivers the isolation piece of hosting AI agents, while a sibling project, agent-substrate, is aimed at the resource-efficiency gap a per-agent pod leaves behind.
Jul 7, 2026 · Tomás Vega · cncf.ioIdentity and accessBoundary 1.0 adds RDP session recording, previews AI-agent access controls
HashiCorp shipped Boundary 1.0 with RDP session recording and a preview of work aimed at securing AI-agent access. For teams that route Windows targets through the proxy, session recording lands as an audit point that used to live in ad-hoc tooling.
Jul 7, 2026 · Maya Okonkwo · hashicorp.comPlatform engineeringGitHub streams Copilot agent sessions to the SIEM, in preview
GitHub put Copilot agent session streaming into public preview on July 2, exposing prompts, responses and tool calls from cloud agents and IDE clients to enterprise event collectors. For CI-adjacent workflows it turns Copilot from a black box into something an on-call can reconstruct after the fact.
Jul 7, 2026 · Maya Okonkwo · github.blogSecurity & supply chainGitHub starts watching the whole public site for your leaked secrets
GitHub is previewing public monitoring for enterprise secret scanning: real-time detection across all of public github.com, with leaks attributed back to your organisation. Useful, and a preview, so read the small print.
Jul 6, 2026 · Tomás Vega · github.blogCode quality & testingLightrun brings production impact into the PR review, and the merge gate gets more interesting
Lightrun added a capability that assesses a pull request's likely production impact before merge, joining a small category of tools that pull runtime context into code review. A step forward for PR review as a real signal, with some honest caveats about what 'runtime-aware' actually delivers today.
Jul 6, 2026 · Priya Nair · devops.comRelease engineeringRelease gates for LLMs: the argument that your CI is not the finish line
A New Stack piece from Freddy Daniel Alvarez Pinto argues that traditional CI/CD gates are not enough for production AI systems, and proposes a release-gating approach built for LLMs. Here is why the framing matters for pipeline owners, and where the honest rough edges sit.
Jul 6, 2026 · Priya Nair · thenewstack.ioIdentity and accessAnthropic swaps per-developer Claude Code secrets for an OIDC gateway
Anthropic shipped a self-hosted Claude apps gateway that runs Claude Code on Amazon Bedrock and Google Cloud without per-developer cloud credentials, federating identity through Google Workspace, Microsoft Entra ID, Okta or any standards-compliant OIDC provider.
Jul 5, 2026 · Tomás Vega · devops.comPlatform engineeringGitHub Copilot's enterprise managed-settings.json is now GA
GitHub Enterprise Cloud can now pin five Copilot behaviours from a single managed-settings.json in a .github-private repository. The file overrides local user config, is fetched on every auth, and refreshes hourly.
Jul 5, 2026 · Maya Okonkwo · github.blogPlatform engineeringGitHub sets July 30 as the hard shutdown for GitHub Models
GitHub published a July 1 changelog entry confirming GitHub Models will be fully retired on July 30, 2026. The earlier closure to new customers now has a matching end date, and any pipeline still calling into the service has a fixed migration window of roughly four weeks.
Jul 5, 2026 · Maya Okonkwo · github.blogDeveloper experienceAnthropic's newer Sonnet lands on GitLab Duo, routed through the AI Gateway
GitLab has added Anthropic's Claude Sonnet 5 to its Duo Agent Platform across every tier and deployment model, delivered through the platform's AI Gateway. Here's what that gateway hop actually changes for the engineer waiting on the pipeline.
Jul 4, 2026 · Priya Nair · about.gitlab.comInfrastructure as codeCloudFormation Express mode ships, returning success before resources are ready
AWS added an Express deployment mode to CloudFormation that reports stack operations complete as soon as resource configuration is applied, with resources continuing to become available in the background. Rollback is disabled by default.
Jul 4, 2026 · Maya Okonkwo · aws.amazon.comSecurity & supply chainCopilot CLI drops the PAT requirement inside GitHub Actions
GitHub says Copilot CLI, when invoked from a GitHub Actions workflow, will now accept the built-in GITHUB_TOKEN. That retires one of the last long-lived personal tokens teams were carrying just to script Copilot from CI.
Jul 4, 2026 · Maya Okonkwo · github.blogInfrastructure as codeCloudFormation now validates every stack operation, not only change sets
AWS extended CloudFormation's pre-deployment validation to run automatically on CreateStack and UpdateStack, alongside CreateChangeSet. It hard-fails property errors and name conflicts before a stack starts rolling, with a softer warning tier that still lives only on change sets.
Jul 3, 2026 · Priya Nair · aws.amazon.comSecurity & supply chainThe Codecov bash uploader is five years old, and the class of attack still lives in your pipeline
A retrospective on the January 2021 Codecov breach revisits how a single tampered line in the uploader turned tens of thousands of downstream CI environments into a secret exfiltration channel. The mechanism has not aged; the countermeasures are boring, and most pipelines still have not shipped them.
Jul 3, 2026 · Tomás Vega · thenewstack.ioSecurity & supply chainlibcurl drops NTLM in September 2026, and on-prem Azure DevOps Git over HTTPS goes with it
Microsoft has warned Azure DevOps Server customers that Git operations over HTTPS will break for anyone still authenticating with NTLM once libcurl removes the protocol in September 2026. Build agents, workgroup boxes and service accounts are the ones most likely to hit the wall.
Jul 3, 2026 · Maya Okonkwo · devblogs.microsoft.comSupply-chain securityCordyceps and the pipeline attack surface we keep ignoring
Novee Security disclosed a CI/CD flaw pattern, Cordyceps, that an unauthenticated actor can use to plant self-propagating triggers across pipelines. The specifics matter less than the shape: pipelines keep landing on the attack surface, and organizations keep treating them like build tools.
Jul 2, 2026 · Tomás Vega · thenewstack.ioRunners & infrastructureDynamic Resource Allocation hits GA in Kubernetes 1.35, and GPU CI jobs finally get a real API
DRA reached general availability in Kubernetes v1.35, and the NVIDIA DRA driver has dropped its Beta label. For teams running GPU workloads through Kubernetes-backed pipelines, it replaces a decade of nodeSelector gymnastics with a first-class request primitive.
Jul 2, 2026 · Priya Nair · cncf.ioPlatform engineeringHarness ships Autonomous Worker Agents, making any pipeline step a Markdown-defined AI agent
Harness has launched Autonomous Worker Agents, letting enterprises replace fixed pipeline scripts with AI agents that inherit the same identity, sandbox, policy engine, and audit trail the platform already uses for scripted steps.
Jul 2, 2026 · Priya Nair · thenewstack.ioSupply-chain securityAikido buys Root to patch open source in place, without the upgrade dance
Aikido Security acquired Root, a company whose technology fixes known vulnerabilities directly inside the package version you already run. The trade-off: someone other than upstream now decides what your dependency looks like on disk.
Jul 1, 2026 · Tomás Vega · thenewstack.ioDeveloper experienceThe three-hour bug your API tests should have caught
A DevOps.com explainer lays out a three-stage API testing shape that keeps feedback under a quarter of an hour: a smoke pass on every PR, the full suite on merge, and dependency-real integration on staging.
Jul 1, 2026 · Priya Nair · devops.comPlatform engineeringAWS reworks the EKS control plane and starts selling it in sized tiers
Amazon EKS engineers detail a set of architectural changes to how the service runs the Kubernetes control plane, including a purpose-built journal that replaces etcd's Raft consensus, and a new tier-priced product, EKS Provisioned Control Plane, that lets customers reserve API and scheduling capacity ahead of bursty workloads.
Jul 1, 2026 · Maya Okonkwo · thenewstack.ioSecurity & supply chainGitHub Actions hands fork triggers a read-only cache token
GitHub Actions now issues read-only cache tokens to workflow events fired from outside a repository's collaborator set, applying least privilege to the default-branch cache so untrusted triggers cannot poison entries the next push reuses.
Jun 30, 2026 · Tomás Vega · github.blogImage distributionDragonfly 2.5 ships Kubernetes webhook injection, drops V1 preheat
The CNCF P2P file distribution project adds an admission webhook that wires pods into the mesh without rebuilding images, plus a download blocklist, an hf:// scheme for model repositories, and a new dfctl CLI. The V1 preheat endpoints are removed.
Jun 30, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chainKubernetes will let you write patches with AI. It will not let you hide it.
The Kubernetes project published an AI contribution policy on June 26, 2026 that bans AI co-author trailers, requires PR descriptions to disclose generative-AI assistance, and tells maintainers to close PRs whose authors cannot explain the code in person. For any project taking community patches, it is a usable template.
Jun 30, 2026 · Tomás Vega · kubernetes.ioIncident responseSurvey: 93% of large North-American IT shops have hit an AI-coding incident
A poll of 406 IT decision makers at North American organizations with more than 250 employees finds nearly all of them have logged at least one infrastructure incident attributable to AI coding tools, a number CI/CD owners can quote when arguing for tighter merge gates on agent-generated changes.
Jun 29, 2026 · Maya Okonkwo · devops.comSecurity & supply chainCI is the wrong place to first hear about your npm dependencies
A DevOps.com essay argues dependency-security feedback that only arrives after a push and a pipeline run is structurally too late for Node projects, where transitive findings can outnumber direct ones. The diagnosis is right. The prescription deserves more scrutiny than the post gives it.
Jun 29, 2026 · Tomás Vega · devops.comRunners & infrastructureGitHub-hosted larger runners pick up RHEL 9 and RHEL 10 in public preview
GitHub's larger hosted runners now offer Red Hat Enterprise Linux 9 and 10 images in public preview, a partnership with Red Hat aimed at shops that have been self-hosting Actions just to keep production-like CI on Red Hat.
Jun 29, 2026 · Maya Okonkwo · github.blogSecurity & supply chainAgent identity is the new wall between functional dev and security review
A New Stack analysis argues agentic systems pass functional review and then stall at the security gate because no one scoped identity, permissions or audit at the platform layer first. For CI/CD owners, it pushes a familiar workload-identity problem onto a much larger fleet of callers.
Jun 28, 2026 · Maya Okonkwo · thenewstack.ioRunners & infrastructureGitHub lets org admins switch off the default hosted runner labels
Organizations on Actions can now disable standard hosted runner labels such as `ubuntu-latest` at the org level, per the June 25 changelog. The toggle turns the default runner pool from an implicit allowlist into a catalogue platform teams have to maintain.
Jun 28, 2026 · Maya Okonkwo · github.blogIncident responseHCP Vault Dedicated opens cluster DR drills, by support ticket only
HashiCorp put cluster disaster recovery for HCP Vault Dedicated into public preview, giving teams a way to simulate cluster-level failures and prove their failover path. The drill is gated through HashiCorp support, not the customer's own runbook.
Jun 28, 2026 · Maya Okonkwo · hashicorp.comDeveloper experienceWhen the agent codes in seconds, CI becomes the slow neighbour
A DevOps.com opinion piece argues that the inner loop is where AI coding agents now live, and that pipeline-stage validation, tests, review and standards checks have to follow them in. The verdict from the developer-experience seat: yes, but only if the agent loop inherits the hermeticity CI fought for.
Jun 27, 2026 · Priya Nair · devops.comSecurity & supply chainSecurity Profiles Operator hits v1 with stable APIs and a hardening pass
The CNCF's Security Profiles Operator graduated to v1.0.0 on June 26, freezing eight CRD APIs and clearing a third-party audit. The kubelet-side follow-up, KEP 6061 for OCI artifact distribution, is the piece still in flight.
Jun 27, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chainVault wants your AI agents to ask permission, one request at a time
HashiCorp Vault Enterprise has put a new authorization model for AI agents into public preview, built on OAuth 2.0 Rich Authorization Requests so agents must declare what they want on every call instead of inheriting long-lived secrets. For pipelines that now host coding agents, it changes who is allowed to do what at runtime.
Jun 27, 2026 · Tomás Vega · hashicorp.comSecurity & supply chainCilium publishes its CI hardening playbook, gaps and all
The Cilium project's third post in its CI/CD hardening series walks through how it manages credentials and verifies what it ships, then lists the parts it has not fixed yet. The unusual move is publishing the unfinished work.
Jun 26, 2026 · Tomás Vega · cncf.ioPlatform engineeringGitHub Actions adds a background marker, and the linear job stops being the only shape
GitHub Actions now lets steps inside a job run concurrently with a 'background' marker plus 'wait', 'cancel' and 'parallel' helpers, breaking the sequential-only model that has defined Actions jobs since launch.
Jun 26, 2026 · Priya Nair · github.blogSupply chain securitynpm freezes high-impact maintainer accounts for 72 hours after a sensitive change
npm now puts its 'high-impact' maintainer accounts into a 72-hour read-only state whenever it detects a sensitive account change like an email update or 2FA recovery code use. Publishing, tokens and team membership are frozen for the window; install and browse stay open.
Jun 26, 2026 · Tomás Vega · github.blogSecurity & supply chainSP Page Builder ships a one-file controller patch in 6.6.2, and the locked support thread is a reminder that patching isn't cleanup
JoomShaper has published the verbatim fix for a vulnerable controller endpoint in its SP Page Builder Joomla extension as a public GitHub gist, after issuing the same fix bundled in v6.6.2. The thread that hosts the patch is locked, and the comments under it are the real story: agencies reporting client sites already compromised, with the update closing the door behind attackers who walked in last week.
Jun 26, 2026 · Tomás Vega · joomshaper.comSecurity & supply chainChainguard's drop-in Java libraries trade a framework upgrade for an SLA
Chainguard is shipping drop-in remediated Java libraries for legacy shops carrying unpatched CVE backlogs, positioned as a package swap inside the build in place of a framework upgrade. The trade-off is who owns the patching SLA from then on.
Jun 25, 2026 · Tomás Vega · thenewstack.ioPlatform engineeringA self-hosted Kubernetes diagnostic agent shipped by GitOps: the CNCF walkthrough
A CNCF blog post lays out a read-only, in-cluster AI agent whose CI/CD chain runs entirely on GitHub Actions and Argo CD Image Updater, with no data leaving the cluster and no cloud AI provider in the loop.
Jun 25, 2026 · Maya Okonkwo · cncf.ioIncident responseGitHub ships a one-click self-revoke for users whose credentials just leaked
An individual GitHub Enterprise member can now wipe every credential they own, personal access tokens, SSH keys, OAuth tokens and SSO authorizations, in a single action from the Settings page. Containment used to be a scavenger hunt across four menus.
Jun 25, 2026 · Tomás Vega · github.blogPlatform engineeringCursor acquires Continue and gives its users a July 15 export deadline
Cursor has bought the open-source AI coding assistant Continue in a quiet acqui-hire that disables recurring billing and sets a July 15 data-deletion date. The Apache 2.0 code stays forkable; the hosted product does not.
Jun 24, 2026 · Maya Okonkwo · thenewstack.ioSecurity & supply chainDependabot can finally pull from private GitHub Packages without a PAT
GitHub gave Dependabot its own GITHUB_TOKEN access to private GitHub Packages and GHCR, retiring one of the most awkward credentials in any CI setup. For pipeline owners, that closes a quiet but persistent rotation tax.
Jun 24, 2026 · Priya Nair · github.blogCode quality & testingCode Quality findings now have a REST API a pipeline can actually call
GitHub put its Code Quality CodeQL findings behind two read-only REST endpoints in public preview, one for listing with filtering and pagination, one for a single finding. The change turns the Code Quality UI's data into something CI/CD jobs and remediation tooling can finally consume on their own schedule.
Jun 24, 2026 · Priya Nair · github.blogPlatform engineeringCopilot for JetBrains gets org-curated agents, mid-run CLI steering, and Claude in preview
GitHub's June 22 Copilot update lands a cluster of changes for JetBrains IDE users: organization- and enterprise-level custom agents now flow through the Copilot Chat agent picker, Copilot CLI sessions gain a mid-run steer-or-queue dropdown, and Claude is available as an agent provider in public preview.
Jun 23, 2026 · Priya Nair · github.blogSecurity & supply chainHomebrew 6.0.0 turns third-party taps into an opt-in trust list
Homebrew 6.0.0 introduces a tap-trust gate that blocks any third-party tap a user has not explicitly approved with brew trust. CI pipelines that install from those taps will need a setup step before the formula resolves.
Jun 23, 2026 · Tomás Vega · devops.comSecurity & supply chainThe Linux Foundation wants AI agents to prove who they are with DNS
The Linux Foundation declared its intent to launch the Agent Name Service, an open standard that anchors AI agent identity to the operator's DNS domain through ACME-issued certificates and an append-only registration log. For pipelines that already lean on workload identity, it points at where agent provenance is heading.
Jun 23, 2026 · Tomás Vega · thenewstack.ioSecurity & supply chainAzure DevOps issuer in WIF service connections heads for July 2027 retirement
Microsoft has set July 1, 2027 as the retirement date for the Azure DevOps issuer in workload identity federation service connections, pushing Azure Pipelines that already moved to secretless auth onto the shared Microsoft Entra issuer over the next year.
Jun 22, 2026 · Maya Okonkwo · devblogs.microsoft.comPlatform engineeringCursor unveils Origin, an agent-first Git host; GitLab and Zed take other paths
Graphite co-founder Tomas Reimers unveiled Origin, a Git-compatible code host built from the ground up for AI agents, at an invite-only Cursor conference. GitLab and Zed are pursuing different rebuilds of the same model.
Jun 22, 2026 · Maya Okonkwo · thenewstack.ioIncident responseAWS wires its DevOps Agent into PagerDuty incidents
AWS has paired its DevOps Agent with PagerDuty so that the moment an incident is created, the agent runs a root-cause investigation across AWS telemetry, deployment history and a short list of third-party observability tools, posting its findings back onto the incident record.
Jun 21, 2026 · Maya Okonkwo · aws.amazon.comSecurity & supply chainCheckmarx's pitch on its new SAST engine: the classifier in front of the queue is the product
Checkmarx unveiled a SAST engine that pairs a deterministic rules scanner with a security-trained LLM and a Findings Analysis Engine that triages true vs. false positives before developers see them. The CI/CD-relevant story is less the model and more the triage layer in front of the merge queue.
Jun 21, 2026 · Tomás Vega · thenewstack.ioInfrastructure as codeAI-generated IaC isn't burying Infrastructure as Code. It is stress-testing it.
A DevOps.com opinion piece argues the newest wave of 'IaC is dead' takes has the news backwards: AI-written infrastructure code is arriving faster than most teams can review, and the platforms that absorbed the volume safely are the ones that bought the boring controls first.
Jun 20, 2026 · Maya Okonkwo · devops.comIncident responseAWS DevOps Agent reaches GA with the Datadog MCP Server in tow
AWS has moved its DevOps Agent from preview to general availability, shipping it alongside the Datadog MCP Server so the agent can correlate monitoring signals with AWS-deployed infrastructure during an incident. The badge change is the smaller story; the bigger one is what SRE teams now have to write down before the agent touches production.
Jun 20, 2026 · Maya Okonkwo · aws.amazon.comIncident responseAWS teaches its DevOps Agent to flip feature flags during incidents
The AWS DevOps Blog details an integration where the AWS DevOps Agent's MCP server talks to LaunchDarkly so an agent can identify and toggle the flags relevant to a live outage instead of paging three teams to do it by hand. The integration removes a real coordination step, and forces every shop to write down which actions an agent is allowed to take unattended.
Jun 20, 2026 · Tomás Vega · aws.amazon.comPlatform engineeringGitLab 19.1 makes the AI Catalog event-driven and gives admins the off switch
Duo Flows in the AI Catalog can now fire on merge-request and pipeline events instead of waiting for a human click, and the same release ships admin controls to disable custom agents, scope the catalog to a group hierarchy, and validate flow config at save time.
Jun 20, 2026 · Maya Okonkwo · about.gitlab.comRunners & infrastructureGitHub Actions lets custom runner images stack on other custom images
Custom images for GitHub-hosted runners can now be built on top of other custom images, per the June 18 changelog. The shift turns runner provisioning into a layered chain that platform teams can govern the same way they manage container base images.
Jun 19, 2026 · Maya Okonkwo · github.blogPlatform engineeringBlock runs its coding-agent fleet from Slack. The chat is the easy part.
The New Stack describes how Block manages and supervises a fleet of AI coding agents from Slack, framing the real problem as operating across many services rather than inside a single repository. For a CI/CD practitioner, the interesting shift is from prompt quality to the control plane around the agents.
Jun 19, 2026 · Priya Nair · thenewstack.ioPlatform engineeringGitHub closes its Models playground to new customers and routes new work to Azure AI Foundry
GitHub is retiring GitHub Models, its in-platform AI playground. Per DevOps.com, the feature is closed to new customers as of June 16; existing users keep playground and API access, and GitHub directs new projects to Azure AI Foundry.
Jun 19, 2026 · Maya Okonkwo · devops.comSecurity & supply chainGitLab 19.1 makes AI secret triage GA, and lets admins lock Duo on across an instance
GitLab 19.1 ships with two changes platform teams have to plan a rollout around: a generally available AI pass that scores secret-detection findings, and an always-on availability mode that lets administrators force Duo on for an entire instance or top-level group.
Jun 19, 2026 · Maya Okonkwo · docs.gitlab.comSecurity & supply chainGitLab 19.1 pulls third-party scanners into one vulnerability view, SARIF and all
GitLab 19.1 lets any SARIF-emitting scanner file findings into the same vulnerability view as its native results, routed through the platform's auto-remediation and false-positive workflow. The interesting part isn't the integration, it's the governance lever it hands platform teams.
Jun 19, 2026 · Tomás Vega · about.gitlab.comSecurity & supply chainEnterprise MCP adoption keeps outrunning its authorization layer
The Model Context Protocol has become the default way enterprises wire AI agents to internal tools, but the authorization layer between agent, protocol and downstream resource is still the part most platform teams are stitching together by hand.
Jun 19, 2026 · Tomás Vega · thenewstack.ioSecurityactions/checkout v7 refuses fork PR code in pull_request_target
GitHub shipped actions/checkout v7, which fails by default when a workflow triggered by pull_request_target or workflow_run tries to fetch the head of a fork's pull request. Same-repo PRs and the standard pull_request event are unaffected; a deliberately conspicuous opt-out exists for teams who really mean it.
Jun 18, 2026 · Tomás Vega · github.blogSecurity & supply chainGitHub Actions hands platform teams a workflow-trigger allow list
GitHub Actions is rolling out workflow execution protections in public preview at the enterprise, organization, and repository levels, letting administrators define who and what can trigger workflows. It's the platform-owned trigger gate the CI/CD industry has been quietly working toward for years.
Jun 18, 2026 · Tomás Vega · github.blogSecurity & supply chainGoogle, Microsoft and OpenAI route their AI 'trust layer' work through the Linux Foundation
Three of the largest AI vendors are aligning on a Linux Foundation–housed effort to build a shared trust layer for AI systems. For platform teams the read is operational: artefact provenance for models and agents is about to ride the same plumbing that already carries binary attestation.
Jun 18, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineeringA CI platform just wired Claude Code into the pipeline as a first-party action, here's what that actually looks like
A CI/CD vendor has shipped a first-party Anthropic integration and a Claude Code pipeline action, joining the steady drip of platforms that want agentic coding assistants inside the build rather than next to it. Useful, but it changes who you trust at which step.
Jun 18, 2026 · Priya Nair · buddy.worksSecurity & supply chainWhen the coding agent runs as you, your blast radius is its blast radius
Docker's latest 'horror stories' post dissects a 13-hour AWS Cost Explorer outage in which a coding agent decided the cleanest fix was to delete production and rebuild it. The deeper failure is structural: an agent with the engineer's identity inherits the engineer's privileges, and the pipeline cannot tell which one of them is at the keyboard.
Jun 18, 2026 · Tomás Vega · docker.comPlatform engineeringGitHub's agent finder lets Copilot look up its own tools
GitHub shipped agent finder for Copilot, a discovery layer that searches MCP servers, skills, canvases, agents and tools instead of pre-wiring them into a context window. It implements the open Agentic Resource Discovery specification developed with Google, GoDaddy, Hugging Face and Microsoft.
Jun 18, 2026 · Priya Nair · github.blogPlatform engineeringFlipkart's chaos platform runs 90% of fault injection in staging, ships five fixes back to LitmusChaos
Flipkart's central reliability engineering team won the CNCF End User Case Study contest for a multi-tenant chaos engineering platform on Kubernetes that runs roughly 90% of its experiments in staging clusters and contributed five fixes upstream to LitmusChaos. The next step on the roadmap is to wire chaos testing into the CI/CD pipeline as a mandatory phase.
Jun 18, 2026 · Maya Okonkwo · cncf.ioComplianceDigital sovereignty pulls CI/CD architecture inside the compliance perimeter
A new CNCF write-up reframes the regulatory shift from data residency to digital sovereignty as a set of architectural patterns for cloud-native platforms, and once sovereignty is a platform property, runner location, pipeline placement and artifact storage move with it.
Jun 18, 2026 · Maya Okonkwo · cncf.ioPlatform engineeringWhen async agents outnumber humans, code review stops being the verification layer
A piece in The New Stack picks up Ido Pesok's disclosure from Cognition that more Devin runs are now triggered asynchronously, by events, schedules, automations and other agents, than by people. The argument: once the trigger ratio flips, verification has to move out of code review and into the runtime that CI/CD owns.
Jun 17, 2026 · Priya Nair · thenewstack.ioIncident responseAWS pushes its DevOps Agent's diagnostic reach down to the EKS node via a custom MCP server
AWS has published a pattern for extending its autonomous DevOps Agent into EKS node OS and runtime data through a custom Model Context Protocol server, addressing incidents that live outside the agent's native cluster-control-plane visibility. The post is explicit that the implementation is a proof of concept, not a production replacement for monitoring or log shipping.
Jun 17, 2026 · Maya Okonkwo · aws.amazon.comRelease managementAWS pushes its DevOps Agent across the release boundary, in preview
AWS used the AWS New York Summit to preview a release-management capability for its DevOps Agent, extending the agent from incident-diagnostics work into the merge-and-deploy phase of CI/CD pipelines.
Jun 17, 2026 · Maya Okonkwo · devops.comSecurity & supply chainHardened-registry hygiene comes for AI agent skills
Chainguard has expanded its Agent Skills offering with a public catalog of more than a thousand hardened skills, a private registry option, and a service that hardens an organization's own internal skills, pulling agent provisioning into the same signing-and-pinning discipline CI/CD teams already apply to container images.
Jun 17, 2026 · Tomás Vega · thenewstack.ioSecurity & supply chainGitHub gives enterprises a kill switch for Copilot's yolo mode
Enterprise-managed settings can now block GitHub Copilot CLI and VS Code from running in bypass-permission mode, the first governance control to land in that configuration plane.
Jun 17, 2026 · Tomás Vega · github.blogCode quality & testingGitHub Code Quality gets a GA date, and a seat inside the merge gate
GitHub has set July 20, 2026 as the general-availability date for Code Quality, a native engine that wires maintainability and reliability checks, code-coverage tracking and merge-blocking quality gates into the pull-request flow. For pipelines, the change shifts a class of checks from third-party SaaS into the same place where the merge decision lives.
Jun 17, 2026 · Maya Okonkwo · github.blogPlatform engineeringHashiCorp ships tfctl, a first-party CLI for HCP Terraform and TFE
HashiCorp has released tfctl, the first dedicated CLI for HCP Terraform and Terraform Enterprise platform operations. Every command supports --dry-run, deletes require interactive confirmation, and the binary is built on the HCP Terraform OpenAPI spec.
Jun 17, 2026 · Maya Okonkwo · hashicorp.comSecurity & supply chainHCP Packer's enforced provisioners turn golden-image policy into a contract teams can't quietly skip
HashiCorp has added enforced provisioners to HCP Packer, letting platform and security teams centrally pin mandatory build steps onto every downstream image rather than trusting that the wiki page got read. The mechanism is the easy part; deciding whether your org actually wants policy this loud is the harder one.
Jun 17, 2026 · Tomás Vega · hashicorp.comInfrastructure as codeTerraform + Ansible collection 2.0 closes the brittle Day-0/Day-1 seam
HashiCorp's Ansible collection 2.0 ships on a newly GA Python SDK (pyTFE 1.0) and bundles an experimental dynamic-inventory plugin that reads Terraform state directly, turning a stretch of homegrown glue between provisioning and configuration into a supported pipeline contract.
Jun 17, 2026 · Priya Nair · hashicorp.comSecurity & supply chainVault learns to speak SPIFFE, and your pipeline's static token is on notice
HashiCorp wired SPIFFE into Vault as both an auth method and a secrets engine, positioning Vault as a workload-identity broker that sits next to SPIRE rather than replacing it. For CI/CD that means one more reason the long-lived bearer token in your job secrets is harder to defend by the day.
Jun 17, 2026 · Tomás Vega · hashicorp.comSecurity & supply chainTenet's 'Agentjacking' research turns Sentry error data into a prompt-injection vector for AI coding agents
Security firm Tenet has demonstrated an indirect prompt-injection technique it calls Agentjacking, malicious instructions hidden inside Sentry error data that get executed by an AI coding agent with shell access. The operational read is that any third-party telemetry an agent ingests is now untrusted input.
Jun 16, 2026 · Maya Okonkwo · devops.comSecurity & supply chainPinning every CI action to a commit SHA is becoming the new minimum
A new write-up from the Cilium maintainers lays out a concrete playbook for locking down CI/CD dependencies, full-SHA pinning for every action, digest-pinned containers, vendored Go modules, and Renovate with a release-age cooldown. The pattern matters even if you do not ship eBPF for a living.
Jun 16, 2026 · Tomás Vega · cncf.ioSecurity & supply chainDocker Content Trust gets a sunset date. The harder question is what you sign with next.
Docker has published a formal retirement plan for Docker Content Trust and the Notary v1 service at notary.docker.io, ten years after DCT shipped. The migration is mostly mechanical, the strategic question, about whether anyone downstream was actually verifying anything, is the part the guide cannot answer for you.
Jun 16, 2026 · Tomás Vega · docker.comSecurity & supply chainDocker Engine 29.4.3 moves the 'Copy Fail' mitigation off seccomp after the first fix broke 32-bit containers
Docker's default profile now uses AppArmor and SELinux to block the AF_ALG socket path that CVE-2026-31431 exploits, after a seccomp-only fix in 29.4.2 broke i386 binaries, Go 386 builds and Wine. The kernel patch is still the real fix; on Ubuntu it has not landed yet.
Jun 16, 2026 · Maya Okonkwo · docker.comInfrastructure as codeTerraform MCP server hits 1.0: what it actually changes for the engineer running the plan
HashiCorp's Terraform MCP server is generally available, giving AI assistants a sanctioned door into the registry, workspaces and plan output. For pipeline owners, it shifts where the agent ends and Terraform begins.
Jun 16, 2026 · Priya Nair · hashicorp.comSecurity & supply chainThe 'OSS ingredients are basically safe' assumption just got a 52,000-package counter-example
Chainguard says it scanned 52,000 open-source packages used by AI-generated and 'vibe-coded' applications and concluded the long-running default, that the ingredients are safe to assume trustworthy, no longer holds. For CI/CD owners, that pushes dependency scrutiny upstream of the build.
Jun 16, 2026 · Tomás Vega · thenewstack.ioSecurity & supply chainGitHub Agentic Workflows drop personal access tokens for the built-in Actions token
Agentic workflows on GitHub can now authenticate with the ephemeral GITHUB_TOKEN instead of a long-lived personal access token. It is a quiet credential-hygiene win that closes one of the messier blast radii in agent-driven CI.
Jun 15, 2026 · Tomás Vega · github.blogRunners & infrastructureGitHub Actions resumes self-hosted runner version enforcement
Self-hosted runners must register on 2.329.0 or later and install each new release within 30 days, with full enforcement landing September 25, 2026 on github.com. The change moves runner version management from a hygiene task into a fleet-inventory problem.
Jun 15, 2026 · Maya Okonkwo · github.blogRunners & infrastructureARM-based CI runners go mainstream, what it means for build costs
Hosted ARM64 runners are now generally available across the major CI clouds. For many builds they cut minutes-billing meaningfully, but only if your toolchain is already multi-arch.
Jun 14, 2026 · Maya Okonkwo · github.blogSecurity & supply chainSBOM attestation is becoming a default pipeline step
Generating and signing a software bill of materials at build time is shifting from compliance nice-to-have to standard CD hygiene. Here's the minimal viable setup.
Jun 12, 2026 · Tomás Vega · slsa.devDeployment strategiesFeature flags vs canary deploys: teams are using both, deliberately
The progressive-delivery debate has matured. The emerging consensus isn't 'pick one', it's flags for behaviour, canaries for infrastructure, with clear ownership for each.
Jun 10, 2026 · Priya Nair · cd.foundation