Leo - DEV Community

Leo

Jul 26

The pull request is twenty, and moving review upstream is the shift I keep quietly rooting for

#codereview #pullrequest #developerworkflow #review

3 min read

Leo

Jul 25

Copilot code review picks up a firewall, custom runners, and head-branch instructions

#github #githubcopilot #codereview #runners

3 min read

Leo

Jul 25

Confidential Containers hits CNCF incubation, and every pipeline is on notice

#cncf #confidentialcontainers #kubernetes #trustedexecution

3 min read

Leo

Jul 25

Four hyperscaler agent sandboxes, four different isolation primitives

#agentsandbox #aiagents #cloudrun #aws

3 min read

Leo

Jul 24

Auditors, OIDC and the trust policy most teams get wrong

#soc2 #githubactions #aws #oidc

4 min read

Leo

Jul 24

GitHub's MCP Server tracks the stateless MCP spec, and the Redis session drops out

#mcp #github #codingagents #protocols

1

3 min read

Leo

Jul 24

FakeGit floods GitHub with malicious repos aimed at coding agents

#supplychainsecurity #codingagents #github #malware

2 min read

Leo

Jul 23

The 60% idle GPU that turned out to be a network policy

#kubernetes #kubeflow #cilium #gpu

3 min read

Leo

Jul 23

CircleCI's CLI is now a Go rewrite with an MCP server bolted on

#circleci #cli #mcp #codingagents

1

4 min read

Leo

Jul 23

Safari Technology Preview 248 gives progress() a no-clamp option and forwards missing components across analogous color spaces

#safari #webkit #css #progressfunction

3 min read

Leo

Jul 23

Pillar research says the AI coding agent sandbox leaks through trusted files

#aiagents #sandbox #promptinjection #security

1

2 min read

Leo

Jul 22

The npm worm that shipped with valid SLSA provenance

#supplychainsecurity #slsa #provenance #npm

4 min read

Leo

Jul 22

Time-to-exploit went negative. Mandiant maps where AI helps the vulnerability queue, and where it fails silently.

#security #vulnerabilitymanagement #aiagents #llm

4 min read

Leo

Jul 22

GitHub Code Quality goes GA, and the billing meter turns on with it

#github #codequality #codeql #copilotautofix

1

3 min read

Leo

Jul 21

CodeMender opens in preview: Google Cloud puts an agent on the security fix

#googlecloud #codemender #aiagents #codesecurity

3 min read

Leo

Jul 21

Secret scanning custom patterns get a REST API, so you can PR your detectors

#github #secretscanning #restapi #detectorsascode

3 min read

Leo

Jul 21

xAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys

#codingagents #supplychain #security #sshkeys

3 min read

Leo

Jul 20

HashiCorp's tfpolicy pulls policy-as-code back inside Terraform

#terraform #hashicorp #policyascode #tfpolicy

4 min read

Leo

Jul 20

Serverless without a front door: Mandiant's hardening checklist for exposed Cloud Run functions

#serverless #cloudfunctions #googlecloud #mandiant

3 min read

Leo

Jul 20

GPUs keep falling off the PCIe bus, and standard node health does not notice

#kubernetes #eks #gpu #selfhealing

2

3 min read

Leo

Jul 19

The workstation is in scope now

#supplychain #developerworkstation #githubactions #vscode

3 min read

Leo

Jul 19

One grid, five rounds, no track matching

#css #subgrid #grid #layout

4 min read

Leo

Jul 19

Xcode 27 lands on GitHub-hosted runners, and the naming rule quietly changed

#githubactions #runners #macos #xcode

3 min read

Leo

Jul 19

Preview environments were built for humans. The traffic changed.

#platformengineering #ephemeralenvironments #aiagents #previewenvironments

4 min read

Leo

Jul 18

OpenAI ships GPT-Red to automate prompt-injection testing against AI agents

#aiagents #promptinjection #security #testing

2 min read

Leo

Jul 18

Progressive rollouts are solved. The validation gate isn't.

#progressivedelivery #validation #canary #deployment

3 min read

Leo

Jul 18

GitLab Duo CLI hits GA: the Duo Agent Platform lands in the terminal

#gitlab #duo #cli #agents

3 min read

Leo

Jul 17

GitLab Duo Security Review Flow goes after the logic bugs SAST leaves on the floor

#gitlab #duo #security #codereview

4 min read

Leo

Jul 17

GitLab tries to auto-fix the transitive-dep problem it keeps quantifying

#gitlab #supplychain #dependencies #autoremediation

5 min read

Leo

Jul 17

GitLab packages Duo Agent Flows so multi-step runs share the platform's controls

#gitlab #duo #agents #workflows

4 min read

Leo

Jul 16

Cordyceps: when a stranger's pull request runs as a maintainer

#supplychain #githubactions #workflowsecurity #pullrequesttarget

3 min read

Leo

Jul 16

aria-expanded has four honest jobs left. The rest belong to the platform.

#a11y #aria #ariaexpanded #semantichtml

4 min read

Leo

Jul 16

GitHub tags AI-generated code scanning alerts on the PR itself

#codescanning #github #aisecurity #pullrequests

3 min read

Leo

Jul 16

Vault Kubernetes KMS enters public beta, aiming at the etcd key sprawl

#hashicorp #vault #kubernetes #kms

3 min read

Leo

Jul 15

GitHub pulls /security-review out of the CLI and into the Copilot app

#github #githubcopilot #securityreview #shiftleft

4 min read

Leo

Jul 15

AWS teaches its DevOps Agent to open the pull request too

#aws #awsdevopsagent #kirocli #incidentremediation

4 min read

Leo

Jul 15

Lea Verou argues polyfills are a net positive for the web platform

#polyfills #webstandards #whatwg #webplatform

1

4 min read

Leo

Jul 15

Dependabot learns to wait: version-update PRs now sit for three days by default

#dependabot #github #supplychain #packageupdates

4 min read

Leo

Jul 14

Autofix that reads more than one file: GitHub previews agentic code scanning fixes

#codescanning #security #github #devrel

1

3 min read

Leo

Jul 14

Datadog says months-long GitHub recon out of dormant 'ghost' accounts is prep for supply-chain attacks

#github #supplychain #security #reconnaissance

1

2 min read

Leo

Jul 14

k8s-aibom writes down the AI your cluster is already running

#supplychain #aibom #cyclonedx #kubernetes

1

3 min read

Leo

Jul 13

HalluSquatting: the dependency your agent invented, and the attacker who registered it first

#supplychain #aicodingagents #packagehallucination #dependencyscanning

3 min read

Leo

Jul 13

The five-minute SBOM sniff test earns its keep

#supplychain #sbom #hardenedimages #security

3 min read

Leo

Jul 13

Codex lands in JetBrains: an in-IDE agent slot, and less config to babysit

#githubcopilot #jetbrains #codex #agents

4 min read

Leo

Jul 12

Entire opens preview of regional Git mirrors aimed at AI-agent clone traffic

#githosting #aiagents #entire #developertools

2 min read

Leo

Jul 12

AWS puts gray zone failures into the EKS control loop

#aws #eks #kubernetes #sre

3 min read

Leo

Jul 12

GitHub lets enterprises pin Copilot's OpenTelemetry endpoint

#opentelemetry #githubcopilot #enterprisemanagedsettings #observability

2 min read

Leo

Jul 11

Innersource security advisories go GA: a private channel for private vulns

#github #ghas #dependabot #supplychain

3 min read

Leo

Jul 11

A running cost meter and an MCP tripwire land in Visual Studio's June update

#githubcopilot #mcp #devrel #visualstudio

1

5 min read

Leo

Jul 11

After the ingress-NGINX retirement, what your migration plan owes production

#kubernetes #ingress #gatewayapi #migration

3 min read

Leo

Jul 10

GitLab shipped a real migration with AI agents and wrote up what actually broke

#gitlab #aiagents #migrations #devrel

4 min read

Leo

Jul 10

GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

#aiagents #codingagents #supplychain #security

1

4 min read

Leo

Jul 10

Google puts Cloud Run sandboxes into preview for AI-generated code

#googlecloud #cloudrun #sandbox #aicode

4 min read

Leo

Jul 9

etcd v3.7 adds a streaming range API and drops the legacy v2 store

#kubernetes #etcd #releases #sre

3 min read

Leo

Jul 9

A primary-nav flyout built on `popover`, not `aria-expanded`

#popover #a11y #navigation #aria

3 min read

Leo

Jul 9

setup-java 5.5.0 adds JDK signature verification, if you remember to enable it

#githubactions #java #signing #supplychain

3 min read

Leo

Jul 9

npm v12 flips install-time to closed-by-default

#npm #supplychain #security #2fa

3 min read

Leo

Jul 8

PolinRider keeps expanding, and the postinstall still lands on your runner

#supplychain #security #npm #maliciouspackages

3 min read

Leo

Jul 8

Vercel buys Better Auth on the pitch that agents need their own login

#vercel #aiagents #agentidentity #workloadidentity

3 min read

Leo

Jul 8

border-shape is the property clip-path always owed you

#css #bordershape #shapes #clippath

3 min read

Writing Debut

Want to connect with Leo?