CICI/CD News
CI/CD · Deployment · DevOps

CI/CD news, without the vendor noise.

Independent CI/CD & deployment news — concise, vendor-neutral takes on pipelines, releases and DevOps tooling.

Featured · Platform engineering

Google's borderless lakehouse wires AWS, Databricks and Snowflake catalogs into one Iceberg REST surface

Google Cloud has pushed a preview of catalog federation that lets BigQuery and Managed Spark read AWS Glue, Databricks Unity Catalog and Snowflake Horizon through an Iceberg REST catalog, and shipped an open-source Data Agent Kit that hands the same tables to MCP-speaking agents. For pipeline teams the practical shift is that the protocol coding agents already talk now reaches a synchronised view of a multi-cloud data estate.

Jul 30, 2026 · Priya Nair · cloud.google.com
Google's borderless lakehouse wires AWS, Databricks and Snowflake catalogs into one Iceberg REST surface

Latest

156 more
Security & supply chain

GTIG and Mandiant publish a supply-chain hardening playbook aimed at CI/CD teams

Google's Threat Intelligence Group and Mandiant have released a joint guide on defending against software supply chain compromise, mapping four control categories onto the concrete pipeline levers most teams already own: short-lived tokens, ephemeral runners, package cooldowns and dependency verification.

Jul 30, 2026 · Tomás Vega · cloud.google.comSecurity & supply chain

OpenAI open-sources the Codex Security CLI and keeps the scanner in-house

OpenAI has released the Codex Security CLI and SDK under Apache 2.0, wiring pre-commit and CI scanning into the merge path with configurable severity gates. The scanning backend and the agent that produces threat models and patches remain proprietary and available only to a limited-beta allowlist.

Jul 30, 2026 · Tomás Vega · devops.comSecurity & supply chain

Docker returns to its coding-agent series with an argument shaped like a CI problem: no layer between the agent and the host

The second entry in Docker's Coding Agent Horror Stories, published on July 20, argues that a coding agent runs under the developer's filesystem permissions and credentials with nothing isolating it from the host by default. For CI teams, that is the runner sandboxing question moved one hop to the left, into the inner loop.

Jul 29, 2026 · Maya Okonkwo · docker.comPlatform engineering

Kyverno's CLI learns to fake production so offline policy tests stop lying

A CNCF blog post walks through how the Kyverno CLI now stands up an in-memory fake of the Kubernetes API cache, so policies that lean on GlobalContextEntry lookups can be exercised offline instead of silently skipping. The workflow that used to say 'all pass' when it really meant 'never ran' has finally closed.

Jul 29, 2026 · Priya Nair · cncf.ioSecurity & supply chain

Docker's fourth horror story revisits the Nx post-install hook that drained CI secrets

The fourth installment of Docker's Coding Agent Horror Stories, published July 28, revisits the August 2025 s1ngularity compromise of the Nx npm package. The lesson for CI/CD teams has nothing to do with coding agents. It is about the post-install hook that ran telemetry.js on every runner that pulled the package.

Jul 29, 2026 · Tomás Vega · docker.comSecurity & supply chain

GitHub Actions freezes suspected-malicious workflow runs until a human signs off

GitHub has flipped Actions into a hold-first posture for workflow runs it flags as potentially malicious on public repositories: the run pauses until a collaborator with write access approves it from an authenticated web session. The change targets a wave of credential-theft attacks that push booby-trapped workflow files with stolen tokens.

Jul 28, 2026 · Tomás Vega · github.blogRunners & infrastructure

Linkerd federation keeps the app running when a whole Kubernetes cluster dies

A CNCF walk-through by Dominik Táskai wires three GKE clusters into a full-mesh Linkerd multicluster and kills one. The nine-pod frontend rebalances across the surviving six with no application changes, but the setup pays a real price at the VPC, node-count and controller layers.

Jul 28, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chain

PyPI stops accepting late file uploads to releases older than 14 days

PyPI will no longer accept new files uploaded to a release once that release is more than 14 days old, closing a stealth path a compromised publishing token could otherwise use to graft malicious code onto an established package. PyPI has said it is not yet aware of the technique being used in a real attack.

Jul 28, 2026 · Maya Okonkwo · devops.comPlatform engineering

Cloud Run moves regional failover out of the runbook and into the load balancer

Google Cloud has added readiness probes and an aggregated service-health signal that lets Cloud Run automatically shift traffic away from an unhealthy region within seconds, per a July 20 post. For teams carrying a manual regional failover runbook, the operational read is which step leaves the on-call rotation.

Jul 27, 2026 · Maya Okonkwo · cloud.google.comPlatform engineering

MCP's next release candidate drops sessions and the handshake, pushes state into handles

The next Model Context Protocol release candidate removes sessions and the initialization handshake and shifts state into handles, moving remote MCP servers toward a stateless HTTP shape. Lead maintainers froze the release ahead of the rewrite, and it invalidates assumptions many existing server implementations were built on.

Jul 27, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineering

Google's pitch: put Agent Substrate on top of GKE Agent Sandbox, and call it the AI-agent runtime

Two months after GKE Agent Sandbox went GA in May 2026, Google introduced a follow-up called Agent Substrate in the same post. The New Stack's read is that Google now wants Kubernetes to be the runtime for AI agents on the primitives GKE already uses for production services.

Jul 26, 2026 · Maya Okonkwo · thenewstack.ioCode quality & testing

Signadot's Kafka routing-key trick: one broker, many parallel tests

The New Stack details how Signadot extends its ephemeral-environments pattern into Kafka. A routing key rides each message, producers stamp it, consumers filter on it, and tagged test traffic can share a broker with stable traffic instead of forcing a broker per branch.

Jul 26, 2026 · Priya Nair · thenewstack.ioDeveloper experience

The pull request is twenty, and moving review upstream is the shift I keep quietly rooting for

The New Stack argues code review should move upstream of the code itself, calling the pull request roughly twenty years old and asking whether the diff is still the right venue to catch a problem. After a year of my best reviews happening in shared docs before any branch existed, I mostly agree.

Jul 26, 2026 · Priya Nair · thenewstack.ioSecurity & supply chain

Confidential Containers hits CNCF incubation, and every pipeline is on notice

The CNCF Technical Oversight Committee voted Confidential Containers into incubation on July 22, moving TEE-backed pods one step closer to being a normal part of the Kubernetes stack. If your pipeline already signs and attests images, the runtime side is about to demand the same discipline.

Jul 25, 2026 · Tomás Vega · cncf.ioDeveloper experience

Copilot code review picks up a firewall, custom runners, and head-branch instructions

GitHub's Copilot code review can now run with a firewall, custom setup steps and independent runner configurations, and custom instructions are read from the pull request's head branch rather than the base branch.

Jul 25, 2026 · Priya Nair · github.blogPlatform engineering

Four hyperscaler agent sandboxes, four different isolation primitives

A New Stack survey argues AWS, Google Cloud, Microsoft Azure and Cloudflare have each shipped an agent-sandbox service, built on four different isolation foundations. Google Cloud's Cloud Run sandboxes public preview, announced at the WeAreDevelopers World Congress, is the news peg.

Jul 25, 2026 · Maya Okonkwo · thenewstack.ioSecurity & supply chain

FakeGit floods GitHub with malicious repos aimed at coding agents

Island researchers say a campaign called FakeGit spun up about 7,600 malicious GitHub repositories, many posing as AI skills or MCP servers, to hand SmartLoader and StealC to developers and to the agents fetching capabilities on their behalf.

Jul 24, 2026 · Maya Okonkwo · devops.comPlatform engineering

GitHub's MCP Server tracks the stateless MCP spec, and the Redis session drops out

Ahead of a 28 July 2026 move to a stateless MCP core, GitHub says its MCP Server has been updated to run without per-session Redis state. For teams wiring coding agents into CI, that changes what the server has to remember between calls.

Jul 24, 2026 · Maya Okonkwo · github.blogSecurity & supply chain

Auditors, OIDC and the trust policy most teams get wrong

A DevOps.com walkthrough by Artur Yolchyan lays out a SOC 2-shaped CI/CD pipeline on GitHub Actions and AWS: multi-account isolation, OIDC federation locked to one repo and branch, and the same container image retagged all the way to production. The interesting part is not the account topology; it is the one line in the trust policy that decides who can talk to your ECR.

Jul 24, 2026 · Tomás Vega · devops.comDeveloper experience

CircleCI's CLI is now a Go rewrite with an MCP server bolted on

CircleCI announced a ground-up Go rewrite of its CLI on July 7, shipped as 1.0 beta with predictable JSON on every command, a browser OAuth login, a debugging TUI and a built-in MCP server for Claude, Cursor and VS Code. It is a small announcement with an outsized effect on anyone who has watched a coding agent flail through unstructured CLI output.

Jul 23, 2026 · Priya Nair · circleci.comRunners & infrastructure

The 60% idle GPU that turned out to be a network policy

A CNCF write-up walks through a distributed Kubeflow training job whose GPUs sat around 60% idle while every pod reported healthy. The failure lived one layer down, in a Cilium policy enforcing zone boundaries that gradient sync had to cross.

Jul 23, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chain

Pillar research says the AI coding agent sandbox leaks through trusted files

Pillar Security researchers demonstrated multiple sandbox-bypass techniques against AI coding agents, plus prompt-injection attacks hidden in READMEs, code comments and dependencies. OpenAI, Google and Cursor have patched several of the reported flaws.

Jul 23, 2026 · Maya Okonkwo · devops.comCode quality & testing

GitHub Code Quality goes GA, and the billing meter turns on with it

GitHub Code Quality moved to general availability on GitHub Enterprise Cloud and GitHub Team on July 20, pairing CodeQL's analysis with AI-assisted detection and Copilot Autofix inside pull requests. The pricing landed the same day: $10 per active committer per month plus usage charges for AI work and CodeQL compute.

Jul 22, 2026 · Tomás Vega · github.blogSecurity & supply chain

Time-to-exploit went negative. Mandiant maps where AI helps the vulnerability queue, and where it fails silently.

Google Cloud's Mandiant team pins mean time-to-exploit at negative seven days and publishes a blueprint for aiming large language models at the vulnerability pipeline. The failure modes it lists are the ones that let the exploit through.

Jul 22, 2026 · Tomás Vega · cloud.google.comSecurity & supply chain

The npm worm that shipped with valid SLSA provenance

A DevOps.com analysis of the Miasma npm worm makes an uncomfortable case: signing and provenance told the honest truth, and the pipeline still shipped malware. When the build platform itself is the attack surface, a green attestation is a description of the failure, not a defence against it.

Jul 22, 2026 · Tomás Vega · devops.comSecurity & supply chain

CodeMender opens in preview: Google Cloud puts an agent on the security fix

Google Cloud has opened a preview of CodeMender, a managed agent that both scans code and proposes remediations, delivered through the Gemini Enterprise Agent Platform and AI Threat Defense. It puts a fresh trust question in front of every CI/CD team: which security fixes are safe to auto-apply, and where does a human still sign?

Jul 21, 2026 · Tomás Vega · cloud.google.comSecurity & supply chain

Secret scanning custom patterns get a REST API, so you can PR your detectors

GitHub made REST endpoints for secret scanning custom patterns generally available on July 13, 2026. Detectors can now be created, listed, updated and deleted via API at repository, organization and enterprise scope, though dry runs and the final publish step still happen in the UI.

Jul 21, 2026 · Priya Nair · github.blogSecurity & supply chain

xAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys

Three days after a researcher demonstrated the Grok Build CLI silently uploading SSH keys and repository contents to xAI's cloud, xAI dropped the agent's full source on GitHub under Apache 2.0. The code is now inspectable. The trust model is a different question.

Jul 21, 2026 · Tomás Vega · devops.comRunners & infrastructure

GPUs keep falling off the PCIe bus, and standard node health does not notice

AWS engineers write up what running Kubernetes at Amazon EKS scale taught them about GPU node failure, and why the default node health model has nothing to say when the GPU just vanishes from the bus.

Jul 20, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineering

HashiCorp's tfpolicy pulls policy-as-code back inside Terraform

HashiCorp introduced tfpolicy, a policy-as-code framework built into Terraform with rules written in HCL, now in public beta on HCP Terraform. For platform teams currently running Sentinel, OPA or Conftest alongside every plan, the change collapses one language and one runtime out of the pipeline.

Jul 20, 2026 · Maya Okonkwo · devops.comSecurity & supply chain

Serverless without a front door: Mandiant's hardening checklist for exposed Cloud Run functions

Google Cloud's Mandiant team published a hardening guide for teams shipping public serverless functions that carry no authentication. Its recommendations put a load balancer, per-function IAM, and pipeline-side security scanning between the internet and your code.

Jul 20, 2026 · Tomás Vega · cloud.google.comSecurity & supply chain

The workstation is in scope now

A DevOps.com essay argues the laptop that pushes commits belongs inside the supply-chain threat model, citing the Megalodon campaign that injected malicious GitHub Actions workflows into thousands of repositories and a separate malicious VS Code extension incident. What CI-side controls actually catch this, and where the pipeline runs out of leverage.

Jul 19, 2026 · Tomás Vega · devops.comPlatform engineering

Preview environments were built for humans. The traffic changed.

A new essay reframes preview and staging environments as a traffic-shaped workload rather than a ticket queue, now that coding agents open pull requests in bursts. Platform teams facing agent-speed demand have to treat environment provisioning as capacity planning.

Jul 19, 2026 · Priya Nair · thenewstack.ioRunners & infrastructure

Xcode 27 lands on GitHub-hosted runners, and the naming rule quietly changed

GitHub Actions added an Xcode 27 image in public preview on its arm64 macOS runners. The bigger shift is buried in the changelog: images are now keyed to the Xcode major version instead of the OS, one Xcode per image.

Jul 19, 2026 · Priya Nair · github.blogDeveloper experience

GitLab Duo CLI hits GA: the Duo Agent Platform lands in the terminal

GitLab Duo CLI reached general availability with GitLab 19.2, bringing Duo Agentic Chat into the shell with interactive and headless modes and sessions shared across the UI and editor extensions.

Jul 18, 2026 · Priya Nair · about.gitlab.comSecurity & supply chain

OpenAI ships GPT-Red to automate prompt-injection testing against AI agents

OpenAI has released GPT-Red, a tool that automates prompt-injection testing against AI agents, per The New Stack. The framing is straightforward: once agents take real actions on real systems, manual red-teaming stops being enough.

Jul 18, 2026 · Tomás Vega · thenewstack.ioDeployment strategies

Progressive rollouts are solved. The validation gate isn't.

A New Stack opinion argues that progressive rollouts are a solved problem while the validation step that actually gates them is still hand-built. From an on-call chair, that reframing is overdue.

Jul 18, 2026 · Maya Okonkwo · thenewstack.ioSupply chain security

GitLab tries to auto-fix the transitive-dep problem it keeps quantifying

GitLab has moved Dependency Scanning Auto-Remediation into beta, aimed squarely at the transitive supply-chain risk it just spent a research cycle measuring. The interesting question is not whether the fix ships, but whether anyone downstream trusts the bot enough to merge it.

Jul 17, 2026 · Tomás Vega · about.gitlab.comPlatform engineering

GitLab packages Duo Agent Flows so multi-step runs share the platform's controls

GitLab is naming a shape for multi-step agent work, Duo Agent Flows, that inherits the same access controls, triggers and review gates as any other pipeline object. The pitch is a middle ground between chat that only answers and homegrown scripts that go stale the moment the platform changes.

Jul 17, 2026 · Maya Okonkwo · about.gitlab.comCode quality & testing

GitLab Duo Security Review Flow goes after the logic bugs SAST leaves on the floor

GitLab moved Security Review Flow into public beta on the Duo Agent Platform. You add it to a merge request like a human reviewer, and it focuses on authorization and business-logic bugs that pattern-based scanners typically miss.

Jul 17, 2026 · Priya Nair · about.gitlab.comDeveloper experience

GitHub tags AI-generated code scanning alerts on the PR itself

Code scanning now surfaces AI-powered security detections directly on pull requests, tagged next to CodeQL findings so reviewers can tell them apart. The alerts are informational and never block a merge, but they finally land where reviewers already look.

Jul 16, 2026 · Priya Nair · github.blogSupply-chain security

Cordyceps: when a stranger's pull request runs as a maintainer

Researchers at Novee catalogue Cordyceps, a class of CI/CD supply-chain exploit where pull requests and comments from untrusted contributors get executed with maintainer permissions. A scan of 30,000 high-impact repositories flagged 654 candidates and confirmed over 300 as fully exploitable, with named blast radius inside Microsoft, Google, Apache and Cloudflare.

Jul 16, 2026 · Tomás Vega · devops.comKubernetes

Vault Kubernetes KMS enters public beta, aiming at the etcd key sprawl

HashiCorp put a Kubernetes KMS v2 plugin for Vault Enterprise into public beta, letting the API server encrypt etcd through the same Vault install that already holds pipeline secrets. It collapses one more custody trail; it does not lower the operational burden on the API server side.

Jul 16, 2026 · Maya Okonkwo · hashicorp.comIncident response

AWS teaches its DevOps Agent to open the pull request too

An AWS DevOps Blog walk-through chains the AWS DevOps Agent with the Kiro CLI so incident findings become a pull request instead of a Slack thread. The pipeline still gates on human approval, but who wrote the diff has changed, and so has what your review is actually catching.

Jul 15, 2026 · Tomás Vega · aws.amazon.comSecurity & supply chain

GitHub pulls /security-review out of the CLI and into the Copilot app

GitHub's /security-review slash command is now in public preview inside the Copilot app, running a security pass on in-flight code changes before they ever reach a pull request. It is the same review that was already in the Copilot CLI, moved closer to where the code is being written.

Jul 15, 2026 · Tomás Vega · github.blogSupply chain security

Dependabot learns to wait: version-update PRs now sit for three days by default

GitHub is flipping Dependabot version updates to a default three-day package cooldown. A new release has to sit on its registry for at least three days before Dependabot will open a version-update PR; security updates are exempt and still open immediately.

Jul 15, 2026 · Tomás Vega · github.blogDeveloper experience

Autofix that reads more than one file: GitHub previews agentic code scanning fixes

GitHub's agentic autofix for code scanning alerts is in public preview, expanding remediation from the alert location out to the files around it. For CI/CD teams, a single alert now maps to a codebase-shaped change instead of a one-line patch.

Jul 14, 2026 · Priya Nair · github.blogSecurity & supply chain

Datadog says months-long GitHub recon out of dormant 'ghost' accounts is prep for supply-chain attacks

Datadog security researchers say overlapping months-long campaigns have been abusing GitHub's public API and reactivating more than 50 long-dormant accounts to map organizations and their engineers. The setup looks a lot like the reconnaissance phase of a supply-chain intrusion.

Jul 14, 2026 · Maya Okonkwo · devops.comSecurity & supply chain

k8s-aibom writes down the AI your cluster is already running

Google Cloud open-sourced k8s-aibom, an unprivileged Kubernetes controller that watches the cluster API for inference runtimes and agent frameworks and emits OWASP CycloneDX ML-BOMs from what it finds. The bet is that shadow-AI inventory is easier to solve from outside the workload than by asking developers to fill in a form.

Jul 14, 2026 · Tomás Vega · cloud.google.comDeveloper experience

Codex lands in JetBrains: an in-IDE agent slot, and less config to babysit

GitHub's Copilot integration for JetBrains adds Codex as an agent provider in public preview, moves hook and MCP server management into the editor, and now honours admin-configured custom models. Here is what a JetBrains user should try first, and where the preview edges still show.

Jul 13, 2026 · Priya Nair · github.blogSupply-chain security

The five-minute SBOM sniff test earns its keep

A quick, deliberate look at the bill of materials for a hardened image catches supply-chain trouble a CVE scanner will never flag. Bolt it into the pipeline, not the compliance report.

Jul 13, 2026 · Tomás Vega · thenewstack.ioSupply-chain security

HalluSquatting: the dependency your agent invented, and the attacker who registered it first

Researchers from Tel Aviv University, the Technion, and Intuit describe a supply-chain pattern, HalluSquatting, that turns an AI coding agent's tendency to hallucinate package and repository names into a delivery channel for remote code execution and botnet payloads. The novelty is in the delivery, not the malware.

Jul 13, 2026 · Tomás Vega · devops.comRunners & infrastructure

AWS puts gray zone failures into the EKS control loop

The New Stack details how AWS treats non-obvious availability zone degradation as its own category on EKS, with zonal shift moving traffic away from an impaired zone before the traditional alarms fire. For CI/CD teams, it reframes what a regional resilience test needs to cover.

Jul 12, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineering

GitHub lets enterprises pin Copilot's OpenTelemetry endpoint

A new enterprise-managed setting mandates where the Copilot Chat extension in VS Code and Copilot CLI send OpenTelemetry data. The managed value overrides environment variables and user settings.

Jul 12, 2026 · Maya Okonkwo · github.blogPlatform engineering

Entire opens preview of regional Git mirrors aimed at AI-agent clone traffic

Ex-GitHub CEO Thomas Dohmke's new company Entire launched a preview of a distributed Git network that mirrors GitHub repositories across the US, Europe and Australia. The pitch is per-region clone throughput for AI coding agents; the mechanism today is read replicas, not a new protocol.

Jul 12, 2026 · Maya Okonkwo · devops.comPlatform engineering

After the ingress-NGINX retirement, what your migration plan owes production

The Kubernetes SIG Network retired ingress-nginx in March 2026, leaving clusters still on it exposed to unpatched CVEs and stalled feature work. A CNCF post lays out the two migration paths operators are picking between and the tooling to make the move.

Jul 11, 2026 · Maya Okonkwo · cncf.ioSupply-chain security

Innersource security advisories go GA: a private channel for private vulns

GitHub Advanced Security now lets enterprise customers publish security advisories that stay inside the enterprise, and Dependabot picks them up like it would a public CVE. Useful, narrow, and only as good as the discipline behind it.

Jul 11, 2026 · Tomás Vega · github.blogDeveloper experience

A running cost meter and an MCP tripwire land in Visual Studio's June update

Visual Studio's June Stable Channel update adds a real-time Copilot usage window with configurable alerts and a trust check that pauses MCP servers whose configuration has changed between sessions. Both arrive in the same weeks engineers have been posting screenshots of surprise Copilot invoices after GitHub moved to usage-based billing on June 1.

Jul 11, 2026 · Priya Nair · devops.comPlatform engineering

Google puts Cloud Run sandboxes into preview for AI-generated code

Google Cloud has moved Cloud Run sandboxes to public preview, positioning them as a runtime for AI-generated code and untrusted binaries that a pipeline would otherwise be asked to trust with host access and cloud credentials.

Jul 10, 2026 · Maya Okonkwo · cloud.google.comSecurity & supply chain

GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

Researchers at Google-owned Wiz disclosed GhostApproval, a class of flaw across six AI coding tools in which symbolic links redirect the agent's file writes while the human approval prompt shows the pre-resolution path. The mechanism is thirty years old; the CI/CD lesson is newer.

Jul 10, 2026 · Tomás Vega · devops.comAI in CI/CD

GitLab shipped a real migration with AI agents and wrote up what actually broke

GitLab's engineering post walks through using its Duo agents to unify two rate-limiting paths across 121 keys and 95 call sites, wrapped in a spec-and-review loop with one honest shadow-mode incident along the way. Here is what a DX-minded reader can lift from it.

Jul 10, 2026 · Priya Nair · about.gitlab.comPlatform engineering

etcd v3.7 adds a streaming range API and drops the legacy v2 store

SIG etcd shipped v3.7.0 with a RangeStream API that chunks large read responses instead of buffering them, plus faster lease handling under load and the removal of the legacy v2 backing store. Kubernetes will expose the feature in v1.37 behind a gate.

Jul 9, 2026 · Maya Okonkwo · kubernetes.ioSupply chain security

npm v12 flips install-time to closed-by-default

npm v12 shipped as latest on July 8, 2026, with lifecycle scripts, git-URL dependencies and remote-URL dependencies all off by default at install time. Alongside it, the 2FA-bypass Granular Access Token starts a two-step retirement that ends direct publishes.

Jul 9, 2026 · Tomás Vega · github.blogSecurity & supply chain

setup-java 5.5.0 adds JDK signature verification, if you remember to enable it

GitHub's actions/setup-java 5.5.0 adds opt-in GPG signature verification for downloaded JDKs, plus a Kona distribution parameter and a set of Maven quality fixes. It closes a real supply-chain gap for Java CI jobs, but existing pipelines keep pulling unsigned JDKs until someone flips the switch.

Jul 9, 2026 · Tomás Vega · github.blogSecurity & supply chain

The SBOM you can trust is the one your build actually made

Docker published a guide arguing that SBOMs generated at build time beat post-build scans on completeness, accuracy and freshness. The distinction quietly changes what a CI pipeline is on the hook for.

Jul 8, 2026 · Tomás Vega · docker.comSupply-chain security

PolinRider keeps expanding, and the postinstall still lands on your runner

DevOps.com reports two DPRK-linked groups are expanding PolinRider, a supply-chain campaign that pushes malicious packages into developer workflows through long-running fake-interview scams. Socket and Rescana are named as the vendors doing the attribution. The pipeline lesson is old, and unfinished.

Jul 8, 2026 · Tomás Vega · devops.comIdentity and access

Vercel buys Better Auth on the pitch that agents need their own login

Vercel has acquired Better Auth, framed as a bet that AI agents opening PRs, reviewing code and creating deployments should hold first-class identity of their own. For CI/CD platforms, that reopens the question of what the merge and deploy gates are actually verifying.

Jul 8, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineering

Sandboxing your agent isn't the hard part, keeping it cheap is

A CNCF post from Solo.io's Lin Sun argues Kubernetes' agent-sandbox project delivers the isolation piece of hosting AI agents, while a sibling project, agent-substrate, is aimed at the resource-efficiency gap a per-agent pod leaves behind.

Jul 7, 2026 · Tomás Vega · cncf.ioIdentity and access

Boundary 1.0 adds RDP session recording, previews AI-agent access controls

HashiCorp shipped Boundary 1.0 with RDP session recording and a preview of work aimed at securing AI-agent access. For teams that route Windows targets through the proxy, session recording lands as an audit point that used to live in ad-hoc tooling.

Jul 7, 2026 · Maya Okonkwo · hashicorp.comPlatform engineering

GitHub streams Copilot agent sessions to the SIEM, in preview

GitHub put Copilot agent session streaming into public preview on July 2, exposing prompts, responses and tool calls from cloud agents and IDE clients to enterprise event collectors. For CI-adjacent workflows it turns Copilot from a black box into something an on-call can reconstruct after the fact.

Jul 7, 2026 · Maya Okonkwo · github.blogSecurity & supply chain

GitHub starts watching the whole public site for your leaked secrets

GitHub is previewing public monitoring for enterprise secret scanning: real-time detection across all of public github.com, with leaks attributed back to your organisation. Useful, and a preview, so read the small print.

Jul 6, 2026 · Tomás Vega · github.blogCode quality & testing

Lightrun brings production impact into the PR review, and the merge gate gets more interesting

Lightrun added a capability that assesses a pull request's likely production impact before merge, joining a small category of tools that pull runtime context into code review. A step forward for PR review as a real signal, with some honest caveats about what 'runtime-aware' actually delivers today.

Jul 6, 2026 · Priya Nair · devops.comRelease engineering

Release gates for LLMs: the argument that your CI is not the finish line

A New Stack piece from Freddy Daniel Alvarez Pinto argues that traditional CI/CD gates are not enough for production AI systems, and proposes a release-gating approach built for LLMs. Here is why the framing matters for pipeline owners, and where the honest rough edges sit.

Jul 6, 2026 · Priya Nair · thenewstack.ioIdentity and access

Anthropic swaps per-developer Claude Code secrets for an OIDC gateway

Anthropic shipped a self-hosted Claude apps gateway that runs Claude Code on Amazon Bedrock and Google Cloud without per-developer cloud credentials, federating identity through Google Workspace, Microsoft Entra ID, Okta or any standards-compliant OIDC provider.

Jul 5, 2026 · Tomás Vega · devops.comPlatform engineering

GitHub Copilot's enterprise managed-settings.json is now GA

GitHub Enterprise Cloud can now pin five Copilot behaviours from a single managed-settings.json in a .github-private repository. The file overrides local user config, is fetched on every auth, and refreshes hourly.

Jul 5, 2026 · Maya Okonkwo · github.blogPlatform engineering

GitHub sets July 30 as the hard shutdown for GitHub Models

GitHub published a July 1 changelog entry confirming GitHub Models will be fully retired on July 30, 2026. The earlier closure to new customers now has a matching end date, and any pipeline still calling into the service has a fixed migration window of roughly four weeks.

Jul 5, 2026 · Maya Okonkwo · github.blogDeveloper experience

Anthropic's newer Sonnet lands on GitLab Duo, routed through the AI Gateway

GitLab has added Anthropic's Claude Sonnet 5 to its Duo Agent Platform across every tier and deployment model, delivered through the platform's AI Gateway. Here's what that gateway hop actually changes for the engineer waiting on the pipeline.

Jul 4, 2026 · Priya Nair · about.gitlab.comInfrastructure as code

CloudFormation Express mode ships, returning success before resources are ready

AWS added an Express deployment mode to CloudFormation that reports stack operations complete as soon as resource configuration is applied, with resources continuing to become available in the background. Rollback is disabled by default.

Jul 4, 2026 · Maya Okonkwo · aws.amazon.comSecurity & supply chain

Copilot CLI drops the PAT requirement inside GitHub Actions

GitHub says Copilot CLI, when invoked from a GitHub Actions workflow, will now accept the built-in GITHUB_TOKEN. That retires one of the last long-lived personal tokens teams were carrying just to script Copilot from CI.

Jul 4, 2026 · Maya Okonkwo · github.blogInfrastructure as code

CloudFormation now validates every stack operation, not only change sets

AWS extended CloudFormation's pre-deployment validation to run automatically on CreateStack and UpdateStack, alongside CreateChangeSet. It hard-fails property errors and name conflicts before a stack starts rolling, with a softer warning tier that still lives only on change sets.

Jul 3, 2026 · Priya Nair · aws.amazon.comSecurity & supply chain

The Codecov bash uploader is five years old, and the class of attack still lives in your pipeline

A retrospective on the January 2021 Codecov breach revisits how a single tampered line in the uploader turned tens of thousands of downstream CI environments into a secret exfiltration channel. The mechanism has not aged; the countermeasures are boring, and most pipelines still have not shipped them.

Jul 3, 2026 · Tomás Vega · thenewstack.ioSecurity & supply chain

libcurl drops NTLM in September 2026, and on-prem Azure DevOps Git over HTTPS goes with it

Microsoft has warned Azure DevOps Server customers that Git operations over HTTPS will break for anyone still authenticating with NTLM once libcurl removes the protocol in September 2026. Build agents, workgroup boxes and service accounts are the ones most likely to hit the wall.

Jul 3, 2026 · Maya Okonkwo · devblogs.microsoft.comSupply-chain security

Cordyceps and the pipeline attack surface we keep ignoring

Novee Security disclosed a CI/CD flaw pattern, Cordyceps, that an unauthenticated actor can use to plant self-propagating triggers across pipelines. The specifics matter less than the shape: pipelines keep landing on the attack surface, and organizations keep treating them like build tools.

Jul 2, 2026 · Tomás Vega · thenewstack.ioRunners & infrastructure

Dynamic Resource Allocation hits GA in Kubernetes 1.35, and GPU CI jobs finally get a real API

DRA reached general availability in Kubernetes v1.35, and the NVIDIA DRA driver has dropped its Beta label. For teams running GPU workloads through Kubernetes-backed pipelines, it replaces a decade of nodeSelector gymnastics with a first-class request primitive.

Jul 2, 2026 · Priya Nair · cncf.ioPlatform engineering

Harness ships Autonomous Worker Agents, making any pipeline step a Markdown-defined AI agent

Harness has launched Autonomous Worker Agents, letting enterprises replace fixed pipeline scripts with AI agents that inherit the same identity, sandbox, policy engine, and audit trail the platform already uses for scripted steps.

Jul 2, 2026 · Priya Nair · thenewstack.ioSupply-chain security

Aikido buys Root to patch open source in place, without the upgrade dance

Aikido Security acquired Root, a company whose technology fixes known vulnerabilities directly inside the package version you already run. The trade-off: someone other than upstream now decides what your dependency looks like on disk.

Jul 1, 2026 · Tomás Vega · thenewstack.ioDeveloper experience

The three-hour bug your API tests should have caught

A DevOps.com explainer lays out a three-stage API testing shape that keeps feedback under a quarter of an hour: a smoke pass on every PR, the full suite on merge, and dependency-real integration on staging.

Jul 1, 2026 · Priya Nair · devops.comPlatform engineering

AWS reworks the EKS control plane and starts selling it in sized tiers

Amazon EKS engineers detail a set of architectural changes to how the service runs the Kubernetes control plane, including a purpose-built journal that replaces etcd's Raft consensus, and a new tier-priced product, EKS Provisioned Control Plane, that lets customers reserve API and scheduling capacity ahead of bursty workloads.

Jul 1, 2026 · Maya Okonkwo · thenewstack.ioSecurity & supply chain

GitHub Actions hands fork triggers a read-only cache token

GitHub Actions now issues read-only cache tokens to workflow events fired from outside a repository's collaborator set, applying least privilege to the default-branch cache so untrusted triggers cannot poison entries the next push reuses.

Jun 30, 2026 · Tomás Vega · github.blogImage distribution

Dragonfly 2.5 ships Kubernetes webhook injection, drops V1 preheat

The CNCF P2P file distribution project adds an admission webhook that wires pods into the mesh without rebuilding images, plus a download blocklist, an hf:// scheme for model repositories, and a new dfctl CLI. The V1 preheat endpoints are removed.

Jun 30, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chain

Kubernetes will let you write patches with AI. It will not let you hide it.

The Kubernetes project published an AI contribution policy on June 26, 2026 that bans AI co-author trailers, requires PR descriptions to disclose generative-AI assistance, and tells maintainers to close PRs whose authors cannot explain the code in person. For any project taking community patches, it is a usable template.

Jun 30, 2026 · Tomás Vega · kubernetes.ioIncident response

Survey: 93% of large North-American IT shops have hit an AI-coding incident

A poll of 406 IT decision makers at North American organizations with more than 250 employees finds nearly all of them have logged at least one infrastructure incident attributable to AI coding tools, a number CI/CD owners can quote when arguing for tighter merge gates on agent-generated changes.

Jun 29, 2026 · Maya Okonkwo · devops.comSecurity & supply chain

CI is the wrong place to first hear about your npm dependencies

A DevOps.com essay argues dependency-security feedback that only arrives after a push and a pipeline run is structurally too late for Node projects, where transitive findings can outnumber direct ones. The diagnosis is right. The prescription deserves more scrutiny than the post gives it.

Jun 29, 2026 · Tomás Vega · devops.comRunners & infrastructure

GitHub-hosted larger runners pick up RHEL 9 and RHEL 10 in public preview

GitHub's larger hosted runners now offer Red Hat Enterprise Linux 9 and 10 images in public preview, a partnership with Red Hat aimed at shops that have been self-hosting Actions just to keep production-like CI on Red Hat.

Jun 29, 2026 · Maya Okonkwo · github.blogSecurity & supply chain

Agent identity is the new wall between functional dev and security review

A New Stack analysis argues agentic systems pass functional review and then stall at the security gate because no one scoped identity, permissions or audit at the platform layer first. For CI/CD owners, it pushes a familiar workload-identity problem onto a much larger fleet of callers.

Jun 28, 2026 · Maya Okonkwo · thenewstack.ioRunners & infrastructure

GitHub lets org admins switch off the default hosted runner labels

Organizations on Actions can now disable standard hosted runner labels such as `ubuntu-latest` at the org level, per the June 25 changelog. The toggle turns the default runner pool from an implicit allowlist into a catalogue platform teams have to maintain.

Jun 28, 2026 · Maya Okonkwo · github.blogIncident response

HCP Vault Dedicated opens cluster DR drills, by support ticket only

HashiCorp put cluster disaster recovery for HCP Vault Dedicated into public preview, giving teams a way to simulate cluster-level failures and prove their failover path. The drill is gated through HashiCorp support, not the customer's own runbook.

Jun 28, 2026 · Maya Okonkwo · hashicorp.comDeveloper experience

When the agent codes in seconds, CI becomes the slow neighbour

A DevOps.com opinion piece argues that the inner loop is where AI coding agents now live, and that pipeline-stage validation, tests, review and standards checks have to follow them in. The verdict from the developer-experience seat: yes, but only if the agent loop inherits the hermeticity CI fought for.

Jun 27, 2026 · Priya Nair · devops.comSecurity & supply chain

Security Profiles Operator hits v1 with stable APIs and a hardening pass

The CNCF's Security Profiles Operator graduated to v1.0.0 on June 26, freezing eight CRD APIs and clearing a third-party audit. The kubelet-side follow-up, KEP 6061 for OCI artifact distribution, is the piece still in flight.

Jun 27, 2026 · Maya Okonkwo · cncf.ioSecurity & supply chain

Vault wants your AI agents to ask permission, one request at a time

HashiCorp Vault Enterprise has put a new authorization model for AI agents into public preview, built on OAuth 2.0 Rich Authorization Requests so agents must declare what they want on every call instead of inheriting long-lived secrets. For pipelines that now host coding agents, it changes who is allowed to do what at runtime.

Jun 27, 2026 · Tomás Vega · hashicorp.comSecurity & supply chain

Cilium publishes its CI hardening playbook, gaps and all

The Cilium project's third post in its CI/CD hardening series walks through how it manages credentials and verifies what it ships, then lists the parts it has not fixed yet. The unusual move is publishing the unfinished work.

Jun 26, 2026 · Tomás Vega · cncf.ioPlatform engineering

GitHub Actions adds a background marker, and the linear job stops being the only shape

GitHub Actions now lets steps inside a job run concurrently with a 'background' marker plus 'wait', 'cancel' and 'parallel' helpers, breaking the sequential-only model that has defined Actions jobs since launch.

Jun 26, 2026 · Priya Nair · github.blogSupply chain security

npm freezes high-impact maintainer accounts for 72 hours after a sensitive change

npm now puts its 'high-impact' maintainer accounts into a 72-hour read-only state whenever it detects a sensitive account change like an email update or 2FA recovery code use. Publishing, tokens and team membership are frozen for the window; install and browse stay open.

Jun 26, 2026 · Tomás Vega · github.blogSecurity & supply chain

SP Page Builder ships a one-file controller patch in 6.6.2, and the locked support thread is a reminder that patching isn't cleanup

JoomShaper has published the verbatim fix for a vulnerable controller endpoint in its SP Page Builder Joomla extension as a public GitHub gist, after issuing the same fix bundled in v6.6.2. The thread that hosts the patch is locked, and the comments under it are the real story: agencies reporting client sites already compromised, with the update closing the door behind attackers who walked in last week.

Jun 26, 2026 · Tomás Vega · joomshaper.comSecurity & supply chain

Chainguard's drop-in Java libraries trade a framework upgrade for an SLA

Chainguard is shipping drop-in remediated Java libraries for legacy shops carrying unpatched CVE backlogs, positioned as a package swap inside the build in place of a framework upgrade. The trade-off is who owns the patching SLA from then on.

Jun 25, 2026 · Tomás Vega · thenewstack.ioPlatform engineering

A self-hosted Kubernetes diagnostic agent shipped by GitOps: the CNCF walkthrough

A CNCF blog post lays out a read-only, in-cluster AI agent whose CI/CD chain runs entirely on GitHub Actions and Argo CD Image Updater, with no data leaving the cluster and no cloud AI provider in the loop.

Jun 25, 2026 · Maya Okonkwo · cncf.ioIncident response

GitHub ships a one-click self-revoke for users whose credentials just leaked

An individual GitHub Enterprise member can now wipe every credential they own, personal access tokens, SSH keys, OAuth tokens and SSO authorizations, in a single action from the Settings page. Containment used to be a scavenger hunt across four menus.

Jun 25, 2026 · Tomás Vega · github.blogPlatform engineering

Cursor acquires Continue and gives its users a July 15 export deadline

Cursor has bought the open-source AI coding assistant Continue in a quiet acqui-hire that disables recurring billing and sets a July 15 data-deletion date. The Apache 2.0 code stays forkable; the hosted product does not.

Jun 24, 2026 · Maya Okonkwo · thenewstack.ioSecurity & supply chain

Dependabot can finally pull from private GitHub Packages without a PAT

GitHub gave Dependabot its own GITHUB_TOKEN access to private GitHub Packages and GHCR, retiring one of the most awkward credentials in any CI setup. For pipeline owners, that closes a quiet but persistent rotation tax.

Jun 24, 2026 · Priya Nair · github.blogCode quality & testing

Code Quality findings now have a REST API a pipeline can actually call

GitHub put its Code Quality CodeQL findings behind two read-only REST endpoints in public preview, one for listing with filtering and pagination, one for a single finding. The change turns the Code Quality UI's data into something CI/CD jobs and remediation tooling can finally consume on their own schedule.

Jun 24, 2026 · Priya Nair · github.blogPlatform engineering

Copilot for JetBrains gets org-curated agents, mid-run CLI steering, and Claude in preview

GitHub's June 22 Copilot update lands a cluster of changes for JetBrains IDE users: organization- and enterprise-level custom agents now flow through the Copilot Chat agent picker, Copilot CLI sessions gain a mid-run steer-or-queue dropdown, and Claude is available as an agent provider in public preview.

Jun 23, 2026 · Priya Nair · github.blogSecurity & supply chain

Homebrew 6.0.0 turns third-party taps into an opt-in trust list

Homebrew 6.0.0 introduces a tap-trust gate that blocks any third-party tap a user has not explicitly approved with brew trust. CI pipelines that install from those taps will need a setup step before the formula resolves.

Jun 23, 2026 · Tomás Vega · devops.comSecurity & supply chain

The Linux Foundation wants AI agents to prove who they are with DNS

The Linux Foundation declared its intent to launch the Agent Name Service, an open standard that anchors AI agent identity to the operator's DNS domain through ACME-issued certificates and an append-only registration log. For pipelines that already lean on workload identity, it points at where agent provenance is heading.

Jun 23, 2026 · Tomás Vega · thenewstack.ioSecurity & supply chain

Azure DevOps issuer in WIF service connections heads for July 2027 retirement

Microsoft has set July 1, 2027 as the retirement date for the Azure DevOps issuer in workload identity federation service connections, pushing Azure Pipelines that already moved to secretless auth onto the shared Microsoft Entra issuer over the next year.

Jun 22, 2026 · Maya Okonkwo · devblogs.microsoft.comPlatform engineering

Cursor unveils Origin, an agent-first Git host; GitLab and Zed take other paths

Graphite co-founder Tomas Reimers unveiled Origin, a Git-compatible code host built from the ground up for AI agents, at an invite-only Cursor conference. GitLab and Zed are pursuing different rebuilds of the same model.

Jun 22, 2026 · Maya Okonkwo · thenewstack.ioIncident response

AWS wires its DevOps Agent into PagerDuty incidents

AWS has paired its DevOps Agent with PagerDuty so that the moment an incident is created, the agent runs a root-cause investigation across AWS telemetry, deployment history and a short list of third-party observability tools, posting its findings back onto the incident record.

Jun 21, 2026 · Maya Okonkwo · aws.amazon.comSecurity & supply chain

Checkmarx's pitch on its new SAST engine: the classifier in front of the queue is the product

Checkmarx unveiled a SAST engine that pairs a deterministic rules scanner with a security-trained LLM and a Findings Analysis Engine that triages true vs. false positives before developers see them. The CI/CD-relevant story is less the model and more the triage layer in front of the merge queue.

Jun 21, 2026 · Tomás Vega · thenewstack.ioInfrastructure as code

AI-generated IaC isn't burying Infrastructure as Code. It is stress-testing it.

A DevOps.com opinion piece argues the newest wave of 'IaC is dead' takes has the news backwards: AI-written infrastructure code is arriving faster than most teams can review, and the platforms that absorbed the volume safely are the ones that bought the boring controls first.

Jun 20, 2026 · Maya Okonkwo · devops.comIncident response

AWS DevOps Agent reaches GA with the Datadog MCP Server in tow

AWS has moved its DevOps Agent from preview to general availability, shipping it alongside the Datadog MCP Server so the agent can correlate monitoring signals with AWS-deployed infrastructure during an incident. The badge change is the smaller story; the bigger one is what SRE teams now have to write down before the agent touches production.

Jun 20, 2026 · Maya Okonkwo · aws.amazon.comIncident response

AWS teaches its DevOps Agent to flip feature flags during incidents

The AWS DevOps Blog details an integration where the AWS DevOps Agent's MCP server talks to LaunchDarkly so an agent can identify and toggle the flags relevant to a live outage instead of paging three teams to do it by hand. The integration removes a real coordination step, and forces every shop to write down which actions an agent is allowed to take unattended.

Jun 20, 2026 · Tomás Vega · aws.amazon.comPlatform engineering

GitLab 19.1 makes the AI Catalog event-driven and gives admins the off switch

Duo Flows in the AI Catalog can now fire on merge-request and pipeline events instead of waiting for a human click, and the same release ships admin controls to disable custom agents, scope the catalog to a group hierarchy, and validate flow config at save time.

Jun 20, 2026 · Maya Okonkwo · about.gitlab.comRunners & infrastructure

GitHub Actions lets custom runner images stack on other custom images

Custom images for GitHub-hosted runners can now be built on top of other custom images, per the June 18 changelog. The shift turns runner provisioning into a layered chain that platform teams can govern the same way they manage container base images.

Jun 19, 2026 · Maya Okonkwo · github.blogPlatform engineering

Block runs its coding-agent fleet from Slack. The chat is the easy part.

The New Stack describes how Block manages and supervises a fleet of AI coding agents from Slack, framing the real problem as operating across many services rather than inside a single repository. For a CI/CD practitioner, the interesting shift is from prompt quality to the control plane around the agents.

Jun 19, 2026 · Priya Nair · thenewstack.ioPlatform engineering

GitHub closes its Models playground to new customers and routes new work to Azure AI Foundry

GitHub is retiring GitHub Models, its in-platform AI playground. Per DevOps.com, the feature is closed to new customers as of June 16; existing users keep playground and API access, and GitHub directs new projects to Azure AI Foundry.

Jun 19, 2026 · Maya Okonkwo · devops.comSecurity & supply chain

GitLab 19.1 makes AI secret triage GA, and lets admins lock Duo on across an instance

GitLab 19.1 ships with two changes platform teams have to plan a rollout around: a generally available AI pass that scores secret-detection findings, and an always-on availability mode that lets administrators force Duo on for an entire instance or top-level group.

Jun 19, 2026 · Maya Okonkwo · docs.gitlab.comSecurity & supply chain

GitLab 19.1 pulls third-party scanners into one vulnerability view, SARIF and all

GitLab 19.1 lets any SARIF-emitting scanner file findings into the same vulnerability view as its native results, routed through the platform's auto-remediation and false-positive workflow. The interesting part isn't the integration, it's the governance lever it hands platform teams.

Jun 19, 2026 · Tomás Vega · about.gitlab.comSecurity & supply chain

Enterprise MCP adoption keeps outrunning its authorization layer

The Model Context Protocol has become the default way enterprises wire AI agents to internal tools, but the authorization layer between agent, protocol and downstream resource is still the part most platform teams are stitching together by hand.

Jun 19, 2026 · Tomás Vega · thenewstack.ioSecurity

actions/checkout v7 refuses fork PR code in pull_request_target

GitHub shipped actions/checkout v7, which fails by default when a workflow triggered by pull_request_target or workflow_run tries to fetch the head of a fork's pull request. Same-repo PRs and the standard pull_request event are unaffected; a deliberately conspicuous opt-out exists for teams who really mean it.

Jun 18, 2026 · Tomás Vega · github.blogSecurity & supply chain

GitHub Actions hands platform teams a workflow-trigger allow list

GitHub Actions is rolling out workflow execution protections in public preview at the enterprise, organization, and repository levels, letting administrators define who and what can trigger workflows. It's the platform-owned trigger gate the CI/CD industry has been quietly working toward for years.

Jun 18, 2026 · Tomás Vega · github.blogSecurity & supply chain

Google, Microsoft and OpenAI route their AI 'trust layer' work through the Linux Foundation

Three of the largest AI vendors are aligning on a Linux Foundation–housed effort to build a shared trust layer for AI systems. For platform teams the read is operational: artefact provenance for models and agents is about to ride the same plumbing that already carries binary attestation.

Jun 18, 2026 · Maya Okonkwo · thenewstack.ioPlatform engineering

A CI platform just wired Claude Code into the pipeline as a first-party action, here's what that actually looks like

A CI/CD vendor has shipped a first-party Anthropic integration and a Claude Code pipeline action, joining the steady drip of platforms that want agentic coding assistants inside the build rather than next to it. Useful, but it changes who you trust at which step.

Jun 18, 2026 · Priya Nair · buddy.worksSecurity & supply chain

When the coding agent runs as you, your blast radius is its blast radius

Docker's latest 'horror stories' post dissects a 13-hour AWS Cost Explorer outage in which a coding agent decided the cleanest fix was to delete production and rebuild it. The deeper failure is structural: an agent with the engineer's identity inherits the engineer's privileges, and the pipeline cannot tell which one of them is at the keyboard.

Jun 18, 2026 · Tomás Vega · docker.comPlatform engineering

GitHub's agent finder lets Copilot look up its own tools

GitHub shipped agent finder for Copilot, a discovery layer that searches MCP servers, skills, canvases, agents and tools instead of pre-wiring them into a context window. It implements the open Agentic Resource Discovery specification developed with Google, GoDaddy, Hugging Face and Microsoft.

Jun 18, 2026 · Priya Nair · github.blogPlatform engineering

Flipkart's chaos platform runs 90% of fault injection in staging, ships five fixes back to LitmusChaos

Flipkart's central reliability engineering team won the CNCF End User Case Study contest for a multi-tenant chaos engineering platform on Kubernetes that runs roughly 90% of its experiments in staging clusters and contributed five fixes upstream to LitmusChaos. The next step on the roadmap is to wire chaos testing into the CI/CD pipeline as a mandatory phase.

Jun 18, 2026 · Maya Okonkwo · cncf.ioCompliance

Digital sovereignty pulls CI/CD architecture inside the compliance perimeter

A new CNCF write-up reframes the regulatory shift from data residency to digital sovereignty as a set of architectural patterns for cloud-native platforms, and once sovereignty is a platform property, runner location, pipeline placement and artifact storage move with it.

Jun 18, 2026 · Maya Okonkwo · cncf.ioPlatform engineering

When async agents outnumber humans, code review stops being the verification layer

A piece in The New Stack picks up Ido Pesok's disclosure from Cognition that more Devin runs are now triggered asynchronously, by events, schedules, automations and other agents, than by people. The argument: once the trigger ratio flips, verification has to move out of code review and into the runtime that CI/CD owns.

Jun 17, 2026 · Priya Nair · thenewstack.ioIncident response

AWS pushes its DevOps Agent's diagnostic reach down to the EKS node via a custom MCP server

AWS has published a pattern for extending its autonomous DevOps Agent into EKS node OS and runtime data through a custom Model Context Protocol server, addressing incidents that live outside the agent's native cluster-control-plane visibility. The post is explicit that the implementation is a proof of concept, not a production replacement for monitoring or log shipping.

Jun 17, 2026 · Maya Okonkwo · aws.amazon.comRelease management

AWS pushes its DevOps Agent across the release boundary, in preview

AWS used the AWS New York Summit to preview a release-management capability for its DevOps Agent, extending the agent from incident-diagnostics work into the merge-and-deploy phase of CI/CD pipelines.

Jun 17, 2026 · Maya Okonkwo · devops.comSecurity & supply chain

Hardened-registry hygiene comes for AI agent skills

Chainguard has expanded its Agent Skills offering with a public catalog of more than a thousand hardened skills, a private registry option, and a service that hardens an organization's own internal skills, pulling agent provisioning into the same signing-and-pinning discipline CI/CD teams already apply to container images.

Jun 17, 2026 · Tomás Vega · thenewstack.ioSecurity & supply chain

GitHub gives enterprises a kill switch for Copilot's yolo mode

Enterprise-managed settings can now block GitHub Copilot CLI and VS Code from running in bypass-permission mode, the first governance control to land in that configuration plane.

Jun 17, 2026 · Tomás Vega · github.blogCode quality & testing

GitHub Code Quality gets a GA date, and a seat inside the merge gate

GitHub has set July 20, 2026 as the general-availability date for Code Quality, a native engine that wires maintainability and reliability checks, code-coverage tracking and merge-blocking quality gates into the pull-request flow. For pipelines, the change shifts a class of checks from third-party SaaS into the same place where the merge decision lives.

Jun 17, 2026 · Maya Okonkwo · github.blogPlatform engineering

HashiCorp ships tfctl, a first-party CLI for HCP Terraform and TFE

HashiCorp has released tfctl, the first dedicated CLI for HCP Terraform and Terraform Enterprise platform operations. Every command supports --dry-run, deletes require interactive confirmation, and the binary is built on the HCP Terraform OpenAPI spec.

Jun 17, 2026 · Maya Okonkwo · hashicorp.comSecurity & supply chain

HCP Packer's enforced provisioners turn golden-image policy into a contract teams can't quietly skip

HashiCorp has added enforced provisioners to HCP Packer, letting platform and security teams centrally pin mandatory build steps onto every downstream image rather than trusting that the wiki page got read. The mechanism is the easy part; deciding whether your org actually wants policy this loud is the harder one.

Jun 17, 2026 · Tomás Vega · hashicorp.comInfrastructure as code

Terraform + Ansible collection 2.0 closes the brittle Day-0/Day-1 seam

HashiCorp's Ansible collection 2.0 ships on a newly GA Python SDK (pyTFE 1.0) and bundles an experimental dynamic-inventory plugin that reads Terraform state directly, turning a stretch of homegrown glue between provisioning and configuration into a supported pipeline contract.

Jun 17, 2026 · Priya Nair · hashicorp.comSecurity & supply chain

Vault learns to speak SPIFFE, and your pipeline's static token is on notice

HashiCorp wired SPIFFE into Vault as both an auth method and a secrets engine, positioning Vault as a workload-identity broker that sits next to SPIRE rather than replacing it. For CI/CD that means one more reason the long-lived bearer token in your job secrets is harder to defend by the day.

Jun 17, 2026 · Tomás Vega · hashicorp.comSecurity & supply chain

Tenet's 'Agentjacking' research turns Sentry error data into a prompt-injection vector for AI coding agents

Security firm Tenet has demonstrated an indirect prompt-injection technique it calls Agentjacking, malicious instructions hidden inside Sentry error data that get executed by an AI coding agent with shell access. The operational read is that any third-party telemetry an agent ingests is now untrusted input.

Jun 16, 2026 · Maya Okonkwo · devops.comSecurity & supply chain

Pinning every CI action to a commit SHA is becoming the new minimum

A new write-up from the Cilium maintainers lays out a concrete playbook for locking down CI/CD dependencies, full-SHA pinning for every action, digest-pinned containers, vendored Go modules, and Renovate with a release-age cooldown. The pattern matters even if you do not ship eBPF for a living.

Jun 16, 2026 · Tomás Vega · cncf.ioSecurity & supply chain

Docker Content Trust gets a sunset date. The harder question is what you sign with next.

Docker has published a formal retirement plan for Docker Content Trust and the Notary v1 service at notary.docker.io, ten years after DCT shipped. The migration is mostly mechanical, the strategic question, about whether anyone downstream was actually verifying anything, is the part the guide cannot answer for you.

Jun 16, 2026 · Tomás Vega · docker.comSecurity & supply chain

Docker Engine 29.4.3 moves the 'Copy Fail' mitigation off seccomp after the first fix broke 32-bit containers

Docker's default profile now uses AppArmor and SELinux to block the AF_ALG socket path that CVE-2026-31431 exploits, after a seccomp-only fix in 29.4.2 broke i386 binaries, Go 386 builds and Wine. The kernel patch is still the real fix; on Ubuntu it has not landed yet.

Jun 16, 2026 · Maya Okonkwo · docker.comInfrastructure as code

Terraform MCP server hits 1.0: what it actually changes for the engineer running the plan

HashiCorp's Terraform MCP server is generally available, giving AI assistants a sanctioned door into the registry, workspaces and plan output. For pipeline owners, it shifts where the agent ends and Terraform begins.

Jun 16, 2026 · Priya Nair · hashicorp.comSecurity & supply chain

The 'OSS ingredients are basically safe' assumption just got a 52,000-package counter-example

Chainguard says it scanned 52,000 open-source packages used by AI-generated and 'vibe-coded' applications and concluded the long-running default, that the ingredients are safe to assume trustworthy, no longer holds. For CI/CD owners, that pushes dependency scrutiny upstream of the build.

Jun 16, 2026 · Tomás Vega · thenewstack.ioSecurity & supply chain

GitHub Agentic Workflows drop personal access tokens for the built-in Actions token

Agentic workflows on GitHub can now authenticate with the ephemeral GITHUB_TOKEN instead of a long-lived personal access token. It is a quiet credential-hygiene win that closes one of the messier blast radii in agent-driven CI.

Jun 15, 2026 · Tomás Vega · github.blogRunners & infrastructure

GitHub Actions resumes self-hosted runner version enforcement

Self-hosted runners must register on 2.329.0 or later and install each new release within 30 days, with full enforcement landing September 25, 2026 on github.com. The change moves runner version management from a hygiene task into a fleet-inventory problem.

Jun 15, 2026 · Maya Okonkwo · github.blogRunners & infrastructure

ARM-based CI runners go mainstream, what it means for build costs

Hosted ARM64 runners are now generally available across the major CI clouds. For many builds they cut minutes-billing meaningfully, but only if your toolchain is already multi-arch.

Jun 14, 2026 · Maya Okonkwo · github.blogSecurity & supply chain

SBOM attestation is becoming a default pipeline step

Generating and signing a software bill of materials at build time is shifting from compliance nice-to-have to standard CD hygiene. Here's the minimal viable setup.

Jun 12, 2026 · Tomás Vega · slsa.devDeployment strategies

Feature flags vs canary deploys: teams are using both, deliberately

The progressive-delivery debate has matured. The emerging consensus isn't 'pick one', it's flags for behaviour, canaries for infrastructure, with clear ownership for each.

Jun 10, 2026 · Priya Nair · cd.foundation

Ship faster than the news cycle. Build your pipeline on Buddy.

Start free