Tag

#shift-left

Tagged “shift-left”

3 articles

GitHub pulls /security-review out of the CLI and into the Copilot app

GitHub's /security-review slash command is now in public preview inside the Copilot app, running a security pass on in-flight code changes before they ever reach a pull request. It is the same review that was already in the Copilot CLI, moved closer to where the code is being written.

Jul 15, 2026 · Tomás Vega Security & supply chain

CI is the wrong place to first hear about your npm dependencies

A DevOps.com essay argues dependency-security feedback that only arrives after a push and a pipeline run is structurally too late for Node projects, where transitive findings can outnumber direct ones. The diagnosis is right. The prescription deserves more scrutiny than the post gives it.

Jun 29, 2026 · Tomás Vega Developer experience

When the agent codes in seconds, CI becomes the slow neighbour

A DevOps.com opinion piece argues that the inner loop is where AI coding agents now live, and that pipeline-stage validation, tests, review and standards checks have to follow them in. The verdict from the developer-experience seat: yes, but only if the agent loop inherits the hermeticity CI fought for.

Jun 27, 2026 · Priya Nair