https://cicd.deployment.to/code-scanning-ai-alerts-pr-review/ CI/CD News en 2026-07-16 GitHub tags AI-generated code scanning alerts on the PR itself https://cicd.deployment.to/cordyceps-untrusted-pr-workflow-hijack/ CI/CD News en 2026-07-16 Cordyceps: when a stranger's pull request runs as a maintainer https://cicd.deployment.to/vault-kubernetes-kms-etcd-beta/ CI/CD News en 2026-07-16 Vault Kubernetes KMS enters public beta, aiming at the etcd key sprawl https://cicd.deployment.to/aws-devops-agent-kiro-cli-remediation/ CI/CD News en 2026-07-15 AWS teaches its DevOps Agent to open the pull request too https://cicd.deployment.to/copilot-security-review-slash-command-preview/ CI/CD News en 2026-07-15 GitHub pulls /security-review out of the CLI and into the Copilot app https://cicd.deployment.to/dependabot-default-package-cooldown/ CI/CD News en 2026-07-15 Dependabot learns to wait: version-update PRs now sit for three days by default