devops

Josh Rosen outlines emerging architectural patterns for the 'agentic security stack' as software development becomes fully agentic — securing the agent worker itself, frontier labs building security agents (OpenAI Codex Security, Claude Code), and vendors embedding security directly into coding-agent loops via MCP, hooks, and skills.

Qodo 3.0 launches PR Triage, a code review tool that groups related PRs from coding agents into scored 'work packages' with cross-repo mapping and unified review briefs, helping humans review multi-repo agent output at scale. The post is a partnered promotion of the Qodo 3.0 launch.

Microsoft announced that WSL containers is now generally available, introducing the `wslc.exe` CLI and a programmatic API for building, running, and deploying Linux containers on Windows, alongside new lifecycle, networking, and observability commands and enterprise governance via Intune and Microsoft Defender for Endpoint.

Gitea 28.0.0 is released, dropping the historical '1.' version prefix and adding features such as audit logging, bot accounts, HTTPS deploy tokens, user impersonation, code-owner approval rules, and an Actions queue view, alongside major breaking changes to Git egress rules and Actions run retention, plus security fixes.

CoIsland is a Mac application that monitors engineering infrastructure and surfaces only breaking issues, with one-click integration to AI coding assistants like Claude Code.

Polylane is an AI agent platform that monitors code and infrastructure and automatically fixes production issues before on-call engineers get paged. It launched on Product Hunt as a free tool combining observability and AI workflow automation.

This tweet introduces a standardized skill scaffold template for AI development to ensure consistent folder structures, reduce CI breaks, and speed up review processes with key components like contract files and fixture tests.

InstaCloud from InsForge, an agent-native serverless cloud, lets AI coding agents deploy apps directly to a scalable, pay-as-you-go cloud with per-service branching for testing. InsForge announced an $8M seed round to position InstaCloud as an alternative to AWS, GCP, and Azure.

InsForge's InstaCloud, a Y Combinator-backed serverless cloud, is launched to address the ownership problem in agent-built apps by allowing AI agents to provision and run infrastructure while humans review changes.

InstaCloud introduces an agent-native serverless cloud platform backed by an $8M seed round, offering managed infrastructure with autoscaling and environment branching for AI agent development.

The article highlights the challenges teams face in monitoring AI agents in production, particularly regarding compliance and health, and invites discussion on current practices and gaps.

Corral is a Linux CLI tool that runs a command with a time limit and guarantees no spawned process survives, using cgroup v2 (`cgroup.kill`) or a subreaper + `/proc` scan + pidfds fallback. It targets AI coding agents and CI jobs that leak daemons, hung pipes, and SIGTERM-ignoring processes.

The article advises Go developers to avoid coupling their code to GitHub by using custom domains for namespace, providing a solution with Nginx configuration and HTML meta tags to maintain flexibility.

This article provides a technical guide on deploying Guix system images directly on Linode cloud servers, including code snippets for system configuration.

The article argues that the output of AI coding agents is straining traditional CI systems, creating a bottleneck that cannot be fixed by hardware alone, and promotes Dagger as a smarter software stack solution.

The article discusses deploying coding agents for large-scale automated review and QA, and introduces 'agent-sandbox' as a Kubernetes-based tool for managing isolated AI agent workloads.

This article explains how to create a GitHub Copilot automation to triage Dependabot pull requests, grouping them by risk and verifying CI status to streamline the review process.

Geocodio describes their evolution from simple bash scripts to full internal applications, leveraging AI to build and maintain tools efficiently and sustainably.

The article discusses what criteria should verify an AI agent's fix of infrastructure issues, using Skyportal's agent with acceptance conditions and checks as an example.

The article explores the debate over whether AI coding agents should have the autonomy to merge their own pull requests, highlighting the distinction between code generation and deployment decisions in software workflows.