DevEx
pgschema: Terraform-Style Postgres Migrations, With a Catch
The dream of declarative Postgres migrations is here. So is the nightmare of accidental data deletion.
Tagged with
github
Security
CISA Left Its Own Keys on GitHub for Six Months
CISA leaked its own AWS keys on GitHub for six months
DevEx
GitHub cut agentic workflow token costs by 62% - here is how they did it
GitHub cut their agentic workflow costs by 62% by pruning unused MCP tools, pre-downloading data before agents start, and switching models. All repos are public.
Security
GitHub Patched a Critical git push RCE in Under Two Hours. GHES Admins Still Have Work.
GitHub disclosed CVE-2026-3854, where the friendly git push path became the RCE door.
DevEx
GitHub Introduces a Package Manager for Prompts, Supply Chain Headaches Included
'Skills are not verified by GitHub.' It's npm for prompts with a formal hands-off security policy.
Security
GitHub Wants You to Hack an AI Agent. Here Is Why You Should.
83% of orgs plan agentic AI, 29% can secure it. Two hours in a CTF teaches more than a production breach.