https://cicd.deployment.to/github-code-quality-ga-billing-live/ CI/CD News en 2026-07-22 GitHub Code Quality goes GA, and the billing meter turns on with it https://cicd.deployment.to/mandiant-negative-tte-ai-vuln-triage/ CI/CD News en 2026-07-22 Time-to-exploit went negative. Mandiant maps where AI helps the vulnerability queue, and where it fails silently. https://cicd.deployment.to/provenance-signed-malicious-miasma/ CI/CD News en 2026-07-22 The npm worm that shipped with valid SLSA provenance https://cicd.deployment.to/codemender-preview-remediation-agent/ CI/CD News en 2026-07-21 CodeMender opens in preview: Google Cloud puts an agent on the security fix https://cicd.deployment.to/secret-scanning-custom-patterns-rest-api/ CI/CD News en 2026-07-21 Secret scanning custom patterns get a REST API, so you can PR your detectors https://cicd.deployment.to/xai-grok-build-open-source-after-ssh-upload/ CI/CD News en 2026-07-21 xAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys