Tag
A report on Microsoft's Azure DevOps MCP server reveals a confused-deputy attack where hidden PR text can manipulate AI review agents (Copilot CLI, Claude Code) into unintended tool calls with the user's permissions. Recommendations include using read-only identities and requiring separate approval steps.
Godot Engine announces updated contribution policies to address overwhelming PR volume and AI-generated contributions, including stricter rules on AI use and new contributor guidelines.
Chintan Turakhia, engineering lead at Coinbase, shares how the team used AI for code review, reducing PR review time from 150 hours to 15 hours, and setting a record of merging 70 PRs in 15 minutes. He emphasizes focusing on solving problems rather than just talking about adopting AI.
Devin AI now natively supports automated end-to-end testing and video recording after creating a PR, sending a recorded screen capture to reviewers for quick verification.
Handler is a tool that allows reviewing AI edits at generation time, similar to stacked PRs.
Linear Diffs is a new feature that lets you review pull requests directly inside Linear.
ControlBot is an open-source tool that reviews Terraform PRs for NIST 800-53 compliance using Checkov and Cursor SDK, providing inline comments and merge gates.
A developer seeks feedback on building a system to audit AI-generated pull requests by reducing cognitive load and highlighting critical changes, asking about first-60-second review practices and trust evidence.