Tag
Retrying a failed CI job treats every flaky test as the same problem. Research from Google, Microsoft, and Atlassian shows flakiness has six distinct root causes, and the fix for one works against another.
Three unrelated npm attacks in May and June 2026 used three different techniques. All three got past 2FA and OIDC Trusted Publishing by skipping the registry account and going straight for the CI runner.
GitHub logged nine incidents in May and dipped near 88% uptime in June as AI agents pushed weekly commits past 275 million. Microsoft is now routing overflow through AWS.
Documentation rot used to be cheap because a confused human would ask a question. AI coding agents don't ask. Here's the CI-enforced system that catches drift before an agent acts on it.
Every SaaS security guide converges on MFA and password managers. The real attack surface at a small SaaS team is 150+ non-human identities with no rotation, no scoping, and no audit.
Practical guides, product updates, and compliance notes — straight to your inbox. No fluff.
Newsletter is opening soon. We'll switch this on once we've got our first issue ready.