Leo - DEV Community

Leo

Aug 2

CISA rewrites the SBOM floor: hashes are required, and the scope now covers AI and SaaS

#sbom #cisa #supplychainsecurity #provenance

3 min read

Leo

Aug 1

npm walls off 2FA-bypass tokens from account and package management

#npm #supplychainsecurity #2fa #accesstokens

3 min read

Leo

Aug 1

The lh unit sizes to the line, not the font

#css #typography #lhunit #lineheight

3 min read

Leo

Aug 1

Docker Hub gets OIDC federation for GitHub Actions, retiring the PAT-in-a-secret pattern

#docker #githubactions #oidc #secrets

6 min read

Leo

Aug 1

The CSS infinity keyword, and what it lets you delete

#css #infinity #calc #clamp

3 min read

Leo

Aug 1

AlloyDB puts agents behind IAM groups so nobody has to share a database password again

#iam #databasesecurity #aiagents #identity

4 min read

Leo

Jul 31

Copilot in VS Code gives each agent session its own git worktree

#githubcopilot #vscode #agents #devrel

4 min read

Leo

Jul 31

Kubernetes 1.37 beta lands a StatefulSet Recreate strategy and CRI pod checkpoint RPCs

#kubernetes #release #statefulset #cri

3 min read

Leo

Jul 31

Route and navigation matching, proposed for CSS

#css #viewtransitions #navigation #cssworkinggroup

3 min read

Leo

Jul 31

Image verification, one layer below admission

#kubernetes #supplychain #policy #attestations

2 min read

Leo

Jul 30

GTIG and Mandiant publish a supply-chain hardening playbook aimed at CI/CD teams

#supplychainsecurity #gtig #mandiant #cicdsecurity

4 min read

Leo

Jul 30

Google's borderless lakehouse wires AWS, Databricks and Snowflake catalogs into one Iceberg REST surface

#googlecloud #iceberg #catalogfederation #mcp

3 min read

Leo

Jul 30

Safari Technology Preview 249 drops attr(), if(), @function, popover=hint and Temporal in one build

#safari #webkit #css #html

3 min read

Leo

Jul 30

OpenAI open-sources the Codex Security CLI and keeps the scanner in-house

#openai #codex #supplychainsecurity #codescanning

4 min read

Leo

Jul 29

Kyverno's CLI learns to fake production so offline policy tests stop lying

#kyverno #kubernetes #policyascode #admissioncontrol

3 min read

Leo

Jul 29

Hard color stops turn conic-gradient() into a triangle machine

#css #conicgradient #gradients #backgrounds

3 min read

Leo

Jul 29

Docker's fourth horror story revisits the Nx post-install hook that drained CI secrets

#supplychainsecurity #npm #postinstallhooks #cirunners

3 min read

Leo

Jul 29

Docker returns to its coding-agent series with an argument shaped like a CI problem: no layer between the agent and the host

#aiagents #sandboxing #codingagents #blastradius

4 min read

Leo

Jul 28

GitHub Actions freezes suspected-malicious workflow runs until a human signs off

#githubactions #supplychainsecurity #workflowapproval #cicdsecurity

4 min read

Leo

Jul 28

Linkerd federation keeps the app running when a whole Kubernetes cluster dies

#linkerd #multicluster #kubernetes #servicemesh

3 min read

Leo

Jul 28

PyPI stops accepting late file uploads to releases older than 14 days

#supplychain #pypi #python #dependabot

3 min read

Leo

Jul 27

MCP's next release candidate drops sessions and the handshake, pushes state into handles

#mcp #modelcontextprotocol #aiagents #protocols

1

3 min read

Leo

Jul 27

Cloud Run moves regional failover out of the runbook and into the load balancer

#googlecloud #cloudrun #multiregion #highavailability

3 min read

Leo

Jul 26

Signadot's Kafka routing-key trick: one broker, many parallel tests

#kafka #testing #ephemeralenvironments #integrationtesting

3 min read

Leo

Jul 26

Google's pitch: put Agent Substrate on top of GKE Agent Sandbox, and call it the AI-agent runtime

#kubernetes #gke #aiagents #agentsandbox

3 min read

Leo

Jul 26

The pull request is twenty, and moving review upstream is the shift I keep quietly rooting for

#codereview #pullrequest #developerworkflow #review

3 min read

Leo

Jul 25

Copilot code review picks up a firewall, custom runners, and head-branch instructions

#github #githubcopilot #codereview #runners

3 min read

Leo

Jul 25

Confidential Containers hits CNCF incubation, and every pipeline is on notice

#cncf #confidentialcontainers #kubernetes #trustedexecution

3 min read

Leo

Jul 25

Four hyperscaler agent sandboxes, four different isolation primitives

#agentsandbox #aiagents #cloudrun #aws

1

3 min read

Leo

Jul 24

Auditors, OIDC and the trust policy most teams get wrong

#soc2 #githubactions #aws #oidc

4 min read

Leo

Jul 24

GitHub's MCP Server tracks the stateless MCP spec, and the Redis session drops out

#mcp #github #codingagents #protocols

1

3 min read

Leo

Jul 24

FakeGit floods GitHub with malicious repos aimed at coding agents

#supplychainsecurity #codingagents #github #malware

2 min read

Leo

Jul 23

The 60% idle GPU that turned out to be a network policy

#kubernetes #kubeflow #cilium #gpu

3 min read

Leo

Jul 23

CircleCI's CLI is now a Go rewrite with an MCP server bolted on

#circleci #cli #mcp #codingagents

1

4 min read

Leo

Jul 23

Safari Technology Preview 248 gives progress() a no-clamp option and forwards missing components across analogous color spaces

#safari #webkit #css #progressfunction

3 min read

Leo

Jul 23

Pillar research says the AI coding agent sandbox leaks through trusted files

#aiagents #sandbox #promptinjection #security

1

2

2 min read

Leo

Jul 22

The npm worm that shipped with valid SLSA provenance

#supplychainsecurity #slsa #provenance #npm

4 min read

Leo

Jul 22

Time-to-exploit went negative. Mandiant maps where AI helps the vulnerability queue, and where it fails silently.

#security #vulnerabilitymanagement #aiagents #llm

4 min read

Leo

Jul 22

GitHub Code Quality goes GA, and the billing meter turns on with it

#github #codequality #codeql #copilotautofix

1

3 min read

Leo

Jul 21

CodeMender opens in preview: Google Cloud puts an agent on the security fix

#googlecloud #codemender #aiagents #codesecurity

3 min read

Leo

Jul 21

Secret scanning custom patterns get a REST API, so you can PR your detectors

#github #secretscanning #restapi #detectorsascode

3 min read

Leo

Jul 21

xAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys

#codingagents #supplychain #security #sshkeys

3 min read

Leo

Jul 20

HashiCorp's tfpolicy pulls policy-as-code back inside Terraform

#terraform #hashicorp #policyascode #tfpolicy

4 min read

Leo

Jul 20

Serverless without a front door: Mandiant's hardening checklist for exposed Cloud Run functions

#serverless #cloudfunctions #googlecloud #mandiant

3 min read

Leo

Jul 20

GPUs keep falling off the PCIe bus, and standard node health does not notice

#kubernetes #eks #gpu #selfhealing

2

3 min read

Leo

Jul 19

The workstation is in scope now

#supplychain #developerworkstation #githubactions #vscode

3 min read

Leo

Jul 19

One grid, five rounds, no track matching

#css #subgrid #grid #layout

4 min read

Leo

Jul 19

Xcode 27 lands on GitHub-hosted runners, and the naming rule quietly changed

#githubactions #runners #macos #xcode

3 min read

Leo

Jul 19

Preview environments were built for humans. The traffic changed.

#platformengineering #ephemeralenvironments #aiagents #previewenvironments

4 min read

Leo

Jul 18

OpenAI ships GPT-Red to automate prompt-injection testing against AI agents

#aiagents #promptinjection #security #testing

2 min read

Leo

Jul 18

Progressive rollouts are solved. The validation gate isn't.

#progressivedelivery #validation #canary #deployment

3 min read

Leo

Jul 18

GitLab Duo CLI hits GA: the Duo Agent Platform lands in the terminal

#gitlab #duo #cli #agents

3 min read

Leo

Jul 17

GitLab Duo Security Review Flow goes after the logic bugs SAST leaves on the floor

#gitlab #duo #security #codereview

4 min read

Leo

Jul 17

GitLab tries to auto-fix the transitive-dep problem it keeps quantifying

#gitlab #supplychain #dependencies #autoremediation

5 min read

Leo

Jul 17

GitLab packages Duo Agent Flows so multi-step runs share the platform's controls

#gitlab #duo #agents #workflows

4 min read

Leo

Jul 16

Cordyceps: when a stranger's pull request runs as a maintainer

#supplychain #githubactions #workflowsecurity #pullrequesttarget

3 min read

Leo

Jul 16

aria-expanded has four honest jobs left. The rest belong to the platform.

#a11y #aria #ariaexpanded #semantichtml

4 min read

Leo

Jul 16

GitHub tags AI-generated code scanning alerts on the PR itself

#codescanning #github #aisecurity #pullrequests

3 min read

Leo

Jul 16

Vault Kubernetes KMS enters public beta, aiming at the etcd key sprawl

#hashicorp #vault #kubernetes #kms

3 min read

Leo

Jul 15

GitHub pulls /security-review out of the CLI and into the Copilot app

#github #githubcopilot #securityreview #shiftleft

4 min read

Writing Debut

Want to connect with Leo?