Social – X
GitLab Tightens Rate Limits as Coding Agents Drive Demand
GitLab is introducing new rate limits for its cloud-based DevOps platform as growing demand from AI agents and automated development tools increases pressure on its infrastructure. The changes, which begin October 19, ...
Codex Sandbox Escapes Show Why Agent Guardrails Can’t Live Inside the Agent
Tom Smith | | agentic AI, AI coding agents, AI security, application security, Codex CLI, Codex Desktop, Codex Security, coding agent security, Developer Security, devsecops, Heapjack, OpenAI Codex, Overpatch, sandbox escape, sandbox security, Software Supply ChainTwo patched OpenAI Codex vulnerabilities, Heapjack and Overpatch, exposed how coding agents can escape sandboxes and reach developer systems without approval prompts ...
Claude Code Adds AGENTS.md Fallback, Cutting Instruction File Sprawl
Tom Smith | | agentic AI, Agentic AI Foundation, AGENTS.md, AI coding agents, AI Development, AI Governance, Anthropic, Claude, Claude Code, coding agents, Cursor, developer tools, devops, Linux Foundation, OpenAI Codex, platform engineeringClaude Code now supports AGENTS.md, giving development teams a shared instruction format across multiple AI coding agents and reducing configuration drift ...
GitHub Separates Who Writes Code From Who Runs Your CI
Tom Smith | | Actions security, CI/CD security, devops, devsecops, github, GitHub Actions, GitHub Enterprise, GitHub security, pipeline security, pull_request_target, Repository Security, Software Supply Chain, supply chain security, workflow execution protections, workflow securityGitHub’s new workflow execution protections let teams control who and what can trigger Actions workflows, reducing CI/CD attack paths and tightening pipeline security ...
US District Court Decision in AI’s Favor Worries Open-Source Developers
A federal appeals court handed GitHub, Microsoft, and OpenAI an important win in the first major appellate ruling over how AI coding tools can use open-source code. As we all know, all ...
Splunk Open Sources Token Meter Tool for Application Developers
Mike Vizard | | agent monitoring, agentic AI, AI budgets, AI coding agents, AI cost management, AI costs, AI Development, AI FinOps, AI observability, Claude Code, Codex, coding assistants, Cursor, developer productivity, developer tools, devops, Kiro, MCP, Model Context Protocol, model costs, OpenCode, Pi, Splunk, token consumption, Token Meter, token usageSplunk’s open-source Token Meter gives developers real-time visibility into AI coding agent activity, token consumption and estimated costs across tools including Claude Code, Codex and Cursor ...
IT Outsourcing Versus In-House Development
Sambhav Aggarwal | | AI-assisted development, cloud infrastructure, Cybersecurity, developer productivity, devops, DevOps outsourcing, digital transformation, engineering costs, engineering strategy, engineering teams, global talent, hybrid teams, in-house development, IT outsourcing, product development, QA outsourcing, scalable development, software delivery, software development, software engineering, software outsourcing, software partners, technical talent, time to marketThe debate isn't new — but the stakes are. In 2026, the gap between companies that get this decision right and those that don't is measured in product cycles, burn rate, and ...
Why Your CI/CD Pipeline Is Your Most Unprotected Attack Surface
Muhammad Yawar Malik | | application security, build agents, build pipelines, CI/CD security, Cloud Security, credential security, dependency security, deployment security, devops security, devsecops, ephemeral runners, GitHub Actions, infrastructure security, Jenkins security, least-privilege, pipeline security, provenance attestation, secrets management, secure pipelines, secure software development, software provenance, Software Supply Chain, supply chain attacks, third-party actions, XZ UtilsCI/CD pipelines often hold privileged credentials, execute third-party code and connect directly to production, making pipeline security one of the most overlooked risks in modern DevOps ...
Anthropic Adds a Coordinator to Claude Projects for Running AI Work in Parallel
Tom Smith | | agentic AI, AI agents, AI coding agents, AI Development, AI project management, AI workflows, Anthropic, autonomous coding, Claude Code, Claude Projects, cloud development, code review, coding automation, developer productivity, developer tools, devops, Git branches, human-in-the-loop, multi-agent orchestration, parallel development, platform engineering, pull requests, software development, software engineeringAnthropic’s redesigned Claude Projects coordinates parallel Claude Code sessions, delegates work across branches and brings the results back through familiar pull-request review workflows ...
StackHawk Delivers Wingman to Fix Vulnerabilities as Developers Write Code
StackHawk this week launched Wingman, an artificial intelligence (AI) tool that makes it possible for application developers to automatically fix vulnerability issues as code is being written. Wingman is designed to install ...
Harness Previews Revamped Platform for the Agentic Engineering Era
Harness today previewed a revamped user interface for its platform for managing software deployments that makes it simpler for software engineers to manage teams of artificial intelligence (AI) agents using a forthcoming ...
How I Consolidated Duplicate Delivery Pipelines With Parameters and Build Tags
Ahmed Tariq | | Azure DevOps, build pipelines, CI/CD, deployment automation, devops, Release PipelinesTwo modules in a repository had near-identical Azure DevOps build and release definitions. A third would have required another pair. The delivery chain used five definitions: one change decider, two builds, and ...
