Topic · 5 stories
5 stories tagged ci-cd on AI Tamer, newest first.
Since 10 November, stolen GitHub logins have opened probe PRs in 60,000+ repos, then pushed a stealer that grabs CI secrets and deletes its own run logs.
Microsoft's azd Foundry extension is GA at 1.0: hosted agents live in azure.yaml, test locally, deploy with azd up and gate CI on evals via GitHub Actions.
Public repos lose pull_request_target by default on 2 December, with brownouts on 9 and 16 November. Actions lockfiles that pin action commits are GA.
Radware found one-day campaign items in repos such as Trivy, LangExtract and MLflow. Two runs show the injected command executed in GitHub Actions.
GitHub may require sign-in for some anonymous HTTPS clones and fetches of public repos during unusual traffic. SSH, pushes and authenticated Git still work.
