Leo - DEV Community

Leo

Jul 21

Secret scanning custom patterns get a REST API, so you can PR your detectors

#github #secretscanning #restapi #detectorsascode

3 min read

Leo

Jul 21

xAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys

#codingagents #supplychain #security #sshkeys

3 min read

Leo

Jul 20

HashiCorp's tfpolicy pulls policy-as-code back inside Terraform

#terraform #hashicorp #policyascode #tfpolicy

4 min read

Leo

Jul 20

Serverless without a front door: Mandiant's hardening checklist for exposed Cloud Run functions

#serverless #cloudfunctions #googlecloud #mandiant

3 min read

Leo

Jul 20

GPUs keep falling off the PCIe bus, and standard node health does not notice

#kubernetes #eks #gpu #selfhealing

2

3 min read

Leo

Jul 19

The workstation is in scope now

#supplychain #developerworkstation #githubactions #vscode

3 min read

Leo

Jul 19

One grid, five rounds, no track matching

#css #subgrid #grid #layout

4 min read

Leo

Jul 19

Xcode 27 lands on GitHub-hosted runners, and the naming rule quietly changed

#githubactions #runners #macos #xcode

3 min read

Leo

Jul 19

Preview environments were built for humans. The traffic changed.

#platformengineering #ephemeralenvironments #aiagents #previewenvironments

4 min read

Leo

Jul 18

OpenAI ships GPT-Red to automate prompt-injection testing against AI agents

#aiagents #promptinjection #security #testing

2 min read

Leo

Jul 18

Progressive rollouts are solved. The validation gate isn't.

#progressivedelivery #validation #canary #deployment

3 min read

Leo

Jul 18

GitLab Duo CLI hits GA: the Duo Agent Platform lands in the terminal

#gitlab #duo #cli #agents

3 min read

Leo

Jul 17

GitLab Duo Security Review Flow goes after the logic bugs SAST leaves on the floor

#gitlab #duo #security #codereview

4 min read

Leo

Jul 17

GitLab tries to auto-fix the transitive-dep problem it keeps quantifying

#gitlab #supplychain #dependencies #autoremediation

5 min read

Leo

Jul 17

GitLab packages Duo Agent Flows so multi-step runs share the platform's controls

#gitlab #duo #agents #workflows

4 min read

Leo

Jul 16

Cordyceps: when a stranger's pull request runs as a maintainer

#supplychain #githubactions #workflowsecurity #pullrequesttarget

3 min read

Leo

Jul 16

aria-expanded has four honest jobs left. The rest belong to the platform.

#a11y #aria #ariaexpanded #semantichtml

4 min read

Leo

Jul 16

GitHub tags AI-generated code scanning alerts on the PR itself

#codescanning #github #aisecurity #pullrequests

3 min read

Leo

Jul 16

Vault Kubernetes KMS enters public beta, aiming at the etcd key sprawl

#hashicorp #vault #kubernetes #kms

3 min read

Leo

Jul 15

GitHub pulls /security-review out of the CLI and into the Copilot app

#github #githubcopilot #securityreview #shiftleft

4 min read

Leo

Jul 15

AWS teaches its DevOps Agent to open the pull request too

#aws #awsdevopsagent #kirocli #incidentremediation

4 min read

Leo

Jul 15

Lea Verou argues polyfills are a net positive for the web platform

#polyfills #webstandards #whatwg #webplatform

1

4 min read

Leo

Jul 15

Dependabot learns to wait: version-update PRs now sit for three days by default

#dependabot #github #supplychain #packageupdates

4 min read

Leo

Jul 14

Autofix that reads more than one file: GitHub previews agentic code scanning fixes

#codescanning #security #github #devrel

1

3 min read

Leo

Jul 14

Datadog says months-long GitHub recon out of dormant 'ghost' accounts is prep for supply-chain attacks

#github #supplychain #security #reconnaissance

1

2 min read

Leo

Jul 14

k8s-aibom writes down the AI your cluster is already running

#supplychain #aibom #cyclonedx #kubernetes

1

3 min read

Leo

Jul 13

HalluSquatting: the dependency your agent invented, and the attacker who registered it first

#supplychain #aicodingagents #packagehallucination #dependencyscanning

3 min read

Leo

Jul 13

The five-minute SBOM sniff test earns its keep

#supplychain #sbom #hardenedimages #security

3 min read

Leo

Jul 13

Codex lands in JetBrains: an in-IDE agent slot, and less config to babysit

#githubcopilot #jetbrains #codex #agents

4 min read

Leo

Jul 12

Entire opens preview of regional Git mirrors aimed at AI-agent clone traffic

#githosting #aiagents #entire #developertools

2 min read

Leo

Jul 12

AWS puts gray zone failures into the EKS control loop

#aws #eks #kubernetes #sre

3 min read

Leo

Jul 12

GitHub lets enterprises pin Copilot's OpenTelemetry endpoint

#opentelemetry #githubcopilot #enterprisemanagedsettings #observability

2 min read

Leo

Jul 11

Innersource security advisories go GA: a private channel for private vulns

#github #ghas #dependabot #supplychain

3 min read

Leo

Jul 11

A running cost meter and an MCP tripwire land in Visual Studio's June update

#githubcopilot #mcp #devrel #visualstudio

1

5 min read

Leo

Jul 11

After the ingress-NGINX retirement, what your migration plan owes production

#kubernetes #ingress #gatewayapi #migration

3 min read

Leo

Jul 10

GitLab shipped a real migration with AI agents and wrote up what actually broke

#gitlab #aiagents #migrations #devrel

4 min read

Leo

Jul 10

GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

#aiagents #codingagents #supplychain #security

1

4 min read

Leo

Jul 10

Google puts Cloud Run sandboxes into preview for AI-generated code

#googlecloud #cloudrun #sandbox #aicode

4 min read

Leo

Jul 9

etcd v3.7 adds a streaming range API and drops the legacy v2 store

#kubernetes #etcd #releases #sre

3 min read

Leo

Jul 9

A primary-nav flyout built on `popover`, not `aria-expanded`

#popover #a11y #navigation #aria

3 min read

Leo

Jul 9

setup-java 5.5.0 adds JDK signature verification, if you remember to enable it

#githubactions #java #signing #supplychain

3 min read

Leo

Jul 9

npm v12 flips install-time to closed-by-default

#npm #supplychain #security #2fa

3 min read

Leo

Jul 8

PolinRider keeps expanding, and the postinstall still lands on your runner

#supplychain #security #npm #maliciouspackages

3 min read

Leo

Jul 8

Vercel buys Better Auth on the pitch that agents need their own login

#vercel #aiagents #agentidentity #workloadidentity

3 min read

Leo

Jul 8

border-shape is the property clip-path always owed you

#css #bordershape #shapes #clippath

3 min read

Leo

Jul 8

The SBOM you can trust is the one your build actually made

#sbom #supplychain #docker #buildkit

4 min read

Leo

Jul 7

Sandboxing your agent isn't the hard part, keeping it cheap is

#aiagents #sandboxing #kubernetes #cncf

3 min read

Leo

Jul 7

GitHub streams Copilot agent sessions to the SIEM, in preview

#githubcopilot #codingagents #audit #siem

3 min read

Leo

Jul 7

CSS anchor positioning: two properties do the wiring

#css #anchorpositioning #positionarea #layout

1

3 min read

Leo

Jul 7

Boundary 1.0 adds RDP session recording, previews AI-agent access controls

#hashicorp #boundary #sessionrecording #rdp

1

3 min read

Leo

Jul 6

Release gates for LLMs: the argument that your CI is not the finish line

#llm #cicd #releasegates #aiagents

4 min read

Leo

Jul 6

Lightrun brings production impact into the PR review, and the merge gate gets more interesting

#codereview #pullrequests #observability #devrel

4 min read

Leo

Jul 6

Chrome 150 hands composite-widget arrow keys to the browser

#a11y #html #focusgroup #keyboardnavigation

1

4 min read

Leo

Jul 6

GitHub starts watching the whole public site for your leaked secrets

#github #secretscanning #supplychain #enterprise

4 min read

Leo

Jul 5

GitHub sets July 30 as the hard shutdown for GitHub Models

#github #githubmodels #deprecation #ai

2 min read

Leo

Jul 5

Anthropic swaps per-developer Claude Code secrets for an OIDC gateway

#claudecode #oidc #identity #governance

3 min read

Leo

Jul 5

GitHub Copilot's enterprise managed-settings.json is now GA

#githubcopilot #enterprisemanagedsettings #aigovernance #vscode

3 min read

Leo

Jul 4

CloudFormation Express mode ships, returning success before resources are ready

#aws #cloudformation #cdk #sam

3 min read

Leo

Jul 4

Anthropic's newer Sonnet lands on GitLab Duo, routed through the AI Gateway

#gitlab #ai #pipelines #deployment

3 min read

Leo

Jul 4

Copilot CLI drops the PAT requirement inside GitHub Actions

#copilotcli #githubactions #githubtoken #secrets

3 min read

Writing Debut

Want to connect with Leo?