https://cicd.deployment.to/circleci-cli-1-0-beta-mcp-agents/ CI/CD News en 2026-07-23 CircleCI's CLI is now a Go rewrite with an MCP server bolted on https://cicd.deployment.to/pillar-ai-agent-sandbox-bypass/ CI/CD News en 2026-07-23 Pillar research says the AI coding agent sandbox leaks through trusted files https://cicd.deployment.to/github-code-quality-ga-billing-live/ CI/CD News en 2026-07-22 GitHub Code Quality goes GA, and the billing meter turns on with it https://cicd.deployment.to/mandiant-negative-tte-ai-vuln-triage/ CI/CD News en 2026-07-22 Time-to-exploit went negative. Mandiant maps where AI helps the vulnerability queue, and where it fails silently. https://cicd.deployment.to/provenance-signed-malicious-miasma/ CI/CD News en 2026-07-22 The npm worm that shipped with valid SLSA provenance