DEV Community

Leo profile picture

Leo

404 bio not found

Joined Joined on 
Codex CLI arrives as a repo-versioned pipeline step
leobaniak profile
Leo

Codex CLI arrives as a repo-versioned pipeline step

#openai #codex #aiagents #pipelines
Comments
4 min read

Want to connect with Leo?

Create an account to connect with Leo. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
The arrayref takeover is the crates.io threat model, not a surprise
leobaniak profile
Leo

The arrayref takeover is the crates.io threat model, not a surprise

#rust #cargo #supplychain #malware
5
Comments
3 min read
Docker Sandboxes plug into GitHub Agentic Workflows as an agent runtime
leobaniak profile
Leo

Docker Sandboxes plug into GitHub Agentic Workflows as an agent runtime

#docker #githubactions #aiagents #sandboxes
1
Comments
4 min read
GitHub says 2.9 billion commits a month, and CI is the downstream tenant
leobaniak profile
Leo

GitHub says 2.9 billion commits a month, and CI is the downstream tenant

#github #actions #scale #infrastructure
1
Comments
2 min read
isolated-vm ships a sandbox escape, and the migration story catches up with itself
leobaniak profile
Leo

isolated-vm ships a sandbox escape, and the migration story catches up with itself

#isolatedvm #vm2 #node #sandboxescape
1
Comments
4 min read
Docker argues AI agent security is a systems problem, not a review problem
leobaniak profile
Leo

Docker argues AI agent security is a systems problem, not a review problem

#aiagents #security #docker #governance
1
Comments
3 min read
The <geolocation> element lands in Chrome 144
leobaniak profile
Leo

The <geolocation> element lands in Chrome 144

#html #geolocation #permissions #progressiveenhancement
1
Comments
3 min read
Self-healing tests fixed themselves. Now the deploy needs a second look.
leobaniak profile
Leo

Self-healing tests fixed themselves. Now the deploy needs a second look.

#selfhealingtests #endtoendtests #deploymentgate #qualitygates
1
Comments
4 min read
EKS clusters lag on an AWS auth deprecation, per The New Stack
leobaniak profile
Leo

EKS clusters lag on an AWS auth deprecation, per The New Stack

#aws #eks #kubernetes #authentication
5
Comments
2 min read
Agent Plugins 1.0 goes GA across VS Code, Copilot CLI and the Copilot app
leobaniak profile
Leo

Agent Plugins 1.0 goes GA across VS Code, Copilot CLI and the Copilot app

#githubcopilot #plugins #agents #vscode
4
Comments
5 min read
Docker VMM goes public beta with Docker Desktop's virtualizer rewritten in-house
leobaniak profile
Leo

Docker VMM goes public beta with Docker Desktop's virtualizer rewritten in-house

#docker #dockerdesktop #virtualization #runners
1
Comments
3 min read
Azure Pipelines opens an arm64 macOS preview with Xcode 27 in the pay-as-you-go pool
leobaniak profile
Leo

Azure Pipelines opens an arm64 macOS preview with Xcode 27 in the pay-as-you-go pool

#azurepipelines #macos #applesilicon #arm64
2
Comments
2 min read
The command your agent approved is not the command that ran
leobaniak profile
Leo

The command your agent approved is not the command that ran

#codingagents #cursor #sandboxing #cve
1
Comments
4 min read
A theme toggle should not overwrite the user's OS choice
leobaniak profile
Leo

A theme toggle should not overwrite the user's OS choice

#darkmode #preferscolorscheme #colorscheme #ux
1
Comments
3 min read
Cloud Native Buildpacks graduates in the CNCF
leobaniak profile
Leo

Cloud Native Buildpacks graduates in the CNCF

#cncf #buildpacks #cloudnativebuildpacks #build
1
Comments
4 min read
AWS wires DevOps Agent into CodePipeline failures via CloudWatch and Lambda
leobaniak profile
Leo

AWS wires DevOps Agent into CodePipeline failures via CloudWatch and Lambda

#aws #codepipeline #devopsagent #github
1
Comments
2 min read
Zero CVEs by default is a floor, not a moat
leobaniak profile
Leo

Zero CVEs by default is a floor, not a moat

#supplychain #hardenedimages #docker #sbom
1
Comments
4 min read
KYAML pins down the YAML that Kubernetes actually reads
leobaniak profile
Leo

KYAML pins down the YAML that Kubernetes actually reads

#kubernetes #kyaml #yaml #manifests
1
Comments
3 min read
AI writes releases faster than your test rig can pretend to grade them
leobaniak profile
Leo

AI writes releases faster than your test rig can pretend to grade them

#ai #releaseengineering #testing #verification
1
Comments
3 min read
A devops.com walkthrough stacks four open-source security gates into GitHub Actions
leobaniak profile
Leo

A devops.com walkthrough stacks four open-source security gates into GitHub Actions

#githubactions #shiftleft #security #sast
1
Comments 1
2 min read
Unsigned images meet an autonomous puller. What could go wrong.
leobaniak profile
Leo

Unsigned images meet an autonomous puller. What could go wrong.

#containerimages #imagesigning #supplychain #cosign
1
Comments
4 min read
The next scanner in your pipeline is an autonomous agent. Ask where it runs.
leobaniak profile
Leo

The next scanner in your pipeline is an autonomous agent. Ask where it runs.

#cicd #securitytesting #autonomous #sast
1
Comments
4 min read
Azure DevOps opens a Service Connection off-ramp from PATs and build session tokens
leobaniak profile
Leo

Azure DevOps opens a Service Connection off-ramp from PATs and build session tokens

#azuredevops #serviceconnection #pat #oidc
1
Comments
3 min read
Kairos pipeline runs a Kubernetes control-plane upgrade in eleven minutes, no operator
leobaniak profile
Leo

Kairos pipeline runs a Kubernetes control-plane upgrade in eleven minutes, no operator

#kubernetes #kairos #clusterupgrades #immutableos
Comments
3 min read
The pipeline is your last honest reviewer for agent-authored change
leobaniak profile
Leo

The pipeline is your last honest reviewer for agent-authored change

#aiagents #governance #provenance #codereview
Comments
4 min read
GitHub's Dependabot playbook: group the version PRs, slow the cadence, keep security fast
leobaniak profile
Leo

GitHub's Dependabot playbook: group the version PRs, slow the cadence, keep security fast

#dependabot #github #supplychain #dependencyupdates
1
Comments
4 min read
GitHub adds an in-product path off branch protection rules
leobaniak profile
Leo

GitHub adds an in-product path off branch protection rules

#github #branchprotection #rulesets #policy
1
Comments
3 min read
Safari Technology Preview 250 lands SVG on the clipboard, text-decoration-inset, and a VoiceOver textarea fix
leobaniak profile
Leo

Safari Technology Preview 250 lands SVG on the clipboard, text-decoration-inset, and a VoiceOver textarea fix

#safari #webkit #css #clipboard
1
Comments
4 min read
Packer 1.16 ships signed SLSA provenance, and a command to check it
leobaniak profile
Leo

Packer 1.16 ships signed SLSA provenance, and a command to check it

#packer #slsa #provenance #supplychain
1
Comments
3 min read
Docker Desktop grows its own VMM, and it is now open beta
leobaniak profile
Leo

Docker Desktop grows its own VMM, and it is now open beta

#docker #dockerdesktop #virtualization #devrel
Comments
3 min read
GitLab's mid-month patch train fixes a CI/CD pipeline authorization bypass
leobaniak profile
Leo

GitLab's mid-month patch train fixes a CI/CD pipeline authorization bypass

#gitlab #security #patchrelease #cicd
1
Comments
2 min read
Whether a dialog closes on outside click is a task question, not a style question
leobaniak profile
Leo

Whether a dialog closes on outside click is a task question, not a style question

#dialog #a11y #html #modal
1
Comments
4 min read
One credential, three tools deep: the LiteLLM supply-chain breach
leobaniak profile
Leo

One credential, three tools deep: the LiteLLM supply-chain breach

#supplychain #litellm #pypi #trivy
2
Comments
2 min read
Multi-gigabyte image pulls are now the EKS cold-start problem
leobaniak profile
Leo

Multi-gigabyte image pulls are now the EKS cold-start problem

#eks #kubernetes #containerimages #coldstart
1
Comments
3 min read
The 'blocked aria-hidden' warning is telling you the truth
leobaniak profile
Leo

The 'blocked aria-hidden' warning is telling you the truth

#a11y #aria #inert #dialog
1
Comments
4 min read
npm provenance attestations get worn as camouflage in a new worm-style attack
leobaniak profile
Leo

npm provenance attestations get worn as camouflage in a new worm-style attack

#npm #supplychain #provenance #attestations
Comments
5 min read
Cloud Native Buildpacks reaches CNCF graduation, and the no-Dockerfile path gets its stamp
leobaniak profile
Leo

Cloud Native Buildpacks reaches CNCF graduation, and the no-Dockerfile path gets its stamp

#buildpacks #cncf #containerimages #oci
Comments
2 min read
AWS releases Dogwood, an open-source policy language for the tool-call sequences agents run
leobaniak profile
Leo

AWS releases Dogwood, an open-source policy language for the tool-call sequences agents run

#aws #agentpolicy #policyascode #opensource
1
Comments 3
3 min read
Animating border-image finally works if you register the gradient stop
leobaniak profile
Leo

Animating border-image finally works if you register the gradient stop

#css #borderimage #animation #gradients
Comments
3 min read
GKE's ClusterNetworkPolicy gives platform teams a floor without stepping on namespace owners
leobaniak profile
Leo

GKE's ClusterNetworkPolicy gives platform teams a floor without stepping on namespace owners

#gke #kubernetes #networkpolicy #multitenancy
Comments
3 min read
A shared agent-plugin format is a shared supply chain
leobaniak profile
Leo

A shared agent-plugin format is a shared supply chain

#agentplugins #standards #supplychain #aiagents
Comments 1
3 min read
RapidFort points its hardened open-source business at what actually runs in production
leobaniak profile
Leo

RapidFort points its hardened open-source business at what actually runs in production

#runtimesecurity #supplychain #opensource #monitoring
1
Comments
2 min read
Google opens Gemini Enterprise Agent Ready as a free training path for agents in production
leobaniak profile
Leo

Google opens Gemini Enterprise Agent Ready as a free training path for agents in production

#aiagents #training #googlecloud #gemini
7
Comments
2 min read
CodeQL 2.26.2 trims what counts as safe: fresh alerts incoming
leobaniak profile
Leo

CodeQL 2.26.2 trims what counts as safe: fresh alerts incoming

#codeql #githubactions #sast #supplychain
1
Comments
3 min read
GitHub's native stacked pull requests land in public preview
leobaniak profile
Leo

GitHub's native stacked pull requests land in public preview

#github #pullrequests #codereview #devrel
1
Comments
4 min read
The default axis-lock finally has an off switch
leobaniak profile
Leo

The default axis-lock finally has an off switch

#css #scroll #scrollaxislock #overflow
1
Comments
3 min read
'Governance is a developer experience problem': a Docker Captain reframes AI-agent trust
leobaniak profile
Leo

'Governance is a developer experience problem': a Docker Captain reframes AI-agent trust

#aigovernance #devrel #platformengineering #agents
1
Comments 1
4 min read
CNCF's shadow-AI post makes the case for treating agents as identities
leobaniak profile
Leo

CNCF's shadow-AI post makes the case for treating agents as identities

#shadowai #supplychainsecurity #cncf #kubernetes
Comments
3 min read
GitLab wires Anthropic's Claude security tooling into its pipeline via MCP
leobaniak profile
Leo

GitLab wires Anthropic's Claude security tooling into its pipeline via MCP

#gitlab #mcp #security #ai
1
Comments 2
3 min read
Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend
leobaniak profile
Leo

Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend

#cloudsecurity #googlecloud #incidentresponse #secrets
2
Comments
2 min read
Styling the dialog element: open is not the same as modal
leobaniak profile
Leo

Styling the dialog element: open is not the same as modal

#html #dialog #css #pseudoclasses
1
Comments
3 min read
Where the controller-runtime cache bites you: stale reads, missing indexes, unbounded watches
leobaniak profile
Leo

Where the controller-runtime cache bites you: stale reads, missing indexes, unbounded watches

#kubernetes #controllerruntime #operators #reliability
1
Comments
3 min read
AWS's new IaC MCP server lets your AI assistant lint CloudFormation and correlate CloudTrail
leobaniak profile
Leo

AWS's new IaC MCP server lets your AI assistant lint CloudFormation and correlate CloudTrail

#aws #cloudformation #mcp #iac
1
Comments
3 min read
Baseline as a bundle audit, and what usually falls out
leobaniak profile
Leo

Baseline as a bundle audit, and what usually falls out

#baseline #webplatform #javascript #performance
2
Comments 1
3 min read
AWS DevOps Agent talks to ServiceNow over MCP, reads incidents and writes findings back
leobaniak profile
Leo

AWS DevOps Agent talks to ServiceNow over MCP, reads incidents and writes findings back

#aws #awsdevopsagent #servicenow #mcp
2
Comments
2 min read
Your theme toggle does not need a System button
leobaniak profile
Leo

Your theme toggle does not need a System button

#darkmode #colorscheme #preferscolorscheme #ux
1
Comments
3 min read
GitHub pauses the Kimi K3 rollout in Copilot while it works a GitHub Actions incident
leobaniak profile
Leo

GitHub pauses the Kimi K3 rollout in Copilot while it works a GitHub Actions incident

#githubactions #githubcopilot #aimodels #incidentresponse
1
Comments
2 min read
GitLab Secrets Manager reaches beyond CI jobs to ESO, Terraform, and an API
leobaniak profile
Leo

GitLab Secrets Manager reaches beyond CI jobs to ESO, Terraform, and an API

#gitlab #secretsmanagement #kubernetes #terraform
1
Comments
4 min read
::highlight() with a text-shadow safety net
leobaniak profile
Leo

::highlight() with a text-shadow safety net

#css #customhighlightapi #highlightpseudoelement #progressiveenhancement
1
Comments
3 min read
HashiCorp reframes HCP Terraform as the accountability layer for AI agents
leobaniak profile
Leo

HashiCorp reframes HCP Terraform as the accountability layer for AI agents

#terraform #hashicorp #aiagents #iac
3
Comments
3 min read
loading...