Tag: github
Coding Agents Broke Git’s Scaling Math. GitHub Is Rebuilding to Keep Up
Tom Smith | | agentic AI, AI coding agents, automation, Azure Blob Storage, CI/CD, code review, developer productivity, devops, GIT, Git Infrastructure, github, GitHub Actions, platform engineering, Repository Scaling, software development, software engineering, Trunk-Based DevelopmentGitHub is rebuilding its Git infrastructure as AI coding agents drive billions of commits, promising up to 35x faster writes while exposing new DevOps bottlenecks ...
GitHub Slams the Brakes on Private Vulnerability Reports
Drowning in AI-generated bug reports? GitHub has a radical answer: Stop accounts from reporting them. GitHub’s new limits on bug reports aren't a solution to the AI bug-report flood. Anything but! They're ...
GitHub’s Security Autofix Agent Now Remembers What It Fixed
Tom Smith | | agentic autofix, AI coding agents, AI security, application security, code scanning, CodeQL, Copilot Memory, devsecops, github, GitHub Advanced Security, GitHub Copilot, repository memory, secure coding, vulnerability remediationGitHub’s agentic autofix now uses Copilot Memory to reuse repository-specific security fix patterns, helping Copilot apply lessons from past vulnerabilities across future alerts, reviews and coding workflows ...
GitHub Gives Enterprises a Full Count of Who Holds the Keys
Tom Smith | | access management, agentic AI, AI coding agents, credential inventory, credential security, Developer Security, devsecops, github, GitHub Apps, GitHub Enterprise Cloud, identity security, least-privilege, OAuth tokens, PATs, Personal Access Tokens, secrets management, security operations, Software Supply Chain Security, SSH keysGitHub Enterprise Cloud now lets organizations export a full inventory of credentials, helping security teams identify stale, overprivileged and forgotten access across users, apps and automation ...
TeamPCP Supply Chain Attack Leads to CrowdSec Source Code Being Stolen
Jeff Burt | | CrowdSec, EDR, github, Mini Shai-Hulud, NPM security, OAuth tokens, supply chain attacks, TanStack compromise, TeamPCPCrowdSec says attackers stole source code from about 170 private GitHub repositories after a TanStack npm supply chain attack exposed an OAuth token tied to a former employee ...
New npm Threat Bypasses Install Script Protections
A malicious npm package that has been downloaded millions of times comes with a new way of spreading the malware that makes it easier to bypass security protections, say researchers with security ...
GitHub Separates Who Writes Code From Who Runs Your CI
Tom Smith | | Actions security, CI/CD security, devops, devsecops, github, GitHub Actions, GitHub Enterprise, GitHub security, pipeline security, pull_request_target, Repository Security, Software Supply Chain, supply chain security, workflow execution protections, workflow securityGitHub’s new workflow execution protections let teams control who and what can trigger Actions workflows, reducing CI/CD attack paths and tightening pipeline security ...
GitHub’s August Outages Show Growth Is Outpacing Infrastructure
Tom Smith | | AI coding agents, capacity planning, CI/CD, cloud infrastructure, developer infrastructure, developer productivity, devops, distributed systems, github, GitHub Actions, GitHub Copilot, GitHub outages, incident response, platform engineering, platform reliability, production resilience, retry storms, service availability, software delivery, Software Supply ChainGitHub's August 2026 report details five outages tied to Actions and Copilot growth outpacing infrastructure. Here's what platform teams should know ...
GitHub Workflows Strain Under AI Agent Development
Coder CEO Rob Whiteley joins Mike Vizard to explain why GitHub workflows, CI/CD pipelines and developer platforms are showing strain under agentic development — and what a policy-aware redesign of the DevOps ...
GitHub’s New Copilot Feature Takes the Guesswork Out of Picking AI Models
Tom Smith | | agentic AI, AI agents, AI coding assistants, AI cost optimization, AI Governance, AI model routing, Code Generation, developer tools, devops, github, GitHub Copilot, model selection, multi-model orchestration, platform engineering, Project HydraFusion, software developmentGitHub’s Project HydraFusion brings multi-model orchestration to Copilot, automatically routing coding tasks across AI models to balance quality, cost and complexity ...
GitHub Puts Copilot in the Approval Seat for Pull Requests
Tom Smith | | AI code review, AI coding, AI Governance, automated code review, branch protection, code review, Copilot code review, developer productivity, developer tools, devops, Engineering Governance, github, GitHub approvals, GitHub Copilot, PR approvals, pull requests, software development, software lifecycleGitHub Copilot can now submit binding pull request approvals, moving AI code review from advisory feedback into the merge decision itself ...
When AI Coding Agents Become Malware Delivery Systems
Samuel Ogbonna | | AI coding agents, AI security, devsecops, github, prompt injection, Software Supply ChainAI coding agents are becoming part of everyday development work. Developers use them to find libraries, configure projects, troubleshoot installation problems, and set up new tools. An agent can search GitHub, read ...
