#policy
Tagged “policy”
4 articlesGitHub takes rule insights up a level: bypass counts across the whole org
GitHub's rule insights dashboard is in public preview at the organization level, adding aggregated ruleset evaluation metrics, a top-repos-by-bypass view, filters and a CSV export. Platform teams that already run rulesets as a gating primitive get a single pane for who is actually going around them.
Aug 22, 2026 · Maya OkonkwoSecurity & supply chainThe pipeline is your last honest reviewer for agent-authored change
A DevOps.com opinion piece argues that when coding agents open pull requests faster than humans can read them, the CI/CD pipeline (not the reviewer) has to be the control plane for AI-authored change.
Aug 15, 2026 · Tomás VegaDeveloper experienceGitHub adds an in-product path off branch protection rules
A GitHub changelog dated 2026-08-11 adds a one-click conversion from legacy branch protection rules into repository rulesets, done inside repo settings. If you have been putting off the migration across a fleet of repos, the tax on doing it just dropped.
Aug 14, 2026 · Priya NairSupply chain securityImage verification, one layer below admission
A CNCF post outlines a Node Resource Interface plugin that verifies SLSA, VEX and VSA attestations at CreateContainer time inside the container runtime, closing gaps that admission webhooks can miss.
Jul 31, 2026 · Tomás Vega