Web Application Development & Coaching
The Supply Chain Attack Your CI/CD Pipeline Never Saw Coming Consider what happens every time your team ships code. A GitHub Actions workflow fires off and pulls in third-party actions to run tests, scan for vulnerabilities, and deploy your app.
Engineers at Radar tested AI agents diagnosing Kubernetes faults with and without context. With runbooks and architecture docs, accuracy jumped from 60% to 86%. The limiting factor is not the model.
GitHub Actions workflow lockfiles are now in public preview. They pin every action to a specific commit so a compromised upstream tag cannot silently change what runs in your pipeline.
Cloudflare cut the cost of their AI code reviewer from $2.43 to $0.77 per run — a 68% reduction — through prompt caching fixes, smarter model routing, and reduced redundant tool calls.
If your development team uses TypeScript, they have felt the wait. Large codebases take seconds to type-check. Every added module stretches those seconds a little further. It is background friction that adds up across hundreds of developer-hours over the course
Datadog released Scout 1.0, an AI model trained specifically on production incident investigation. It matches frontier model accuracy at 3 to 8 times lower cost, and powers Bits Investigation as an always-on first responder before an engineer is ever paged.
The prevailing assumption in AI adoption has been that bigger, smarter, general-purpose models are always the right answer. Datadog just put a dent in that assumption. This week, Datadog introduced Scout 1.0, an AI model trained specifically to investigate production
If your deployment pipeline calls an external service, there is a good chance it does so using an API key stored somewhere in your infrastructure. A text string. Created once, copied into a config file, and then mostly forgotten until
Every engineering team has a version of this problem. There is an API key buried in a CI/CD pipeline that was configured by someone who left the company a year ago. It still works. It has full access to whatever
Pulumi ESC’s new OIDC token provider replaces long-lived stored API keys with short-lived credentials that expire automatically. Here’s why that matters for your infrastructure.