» Tag
ci-cd
39 postsRunning Untrusted Code Safely in AI and CI Pipelines
AI reviewers and CI systems now execute code from strangers. We break down why sandboxing alone fails and the real principles for safe isolation.
revert_guard.py Stops AI Agents From Re-adding Reverted Code
revert_guard.py reads a repo's own git revert history to block AI agents from re-adding previously reverted code, like a card_token column, before it gets committed—offline and keyless.
Why LLM-as-judge scores flip between identical runs
An LLM judge gate flipped between 0.79 and 0.82 on identical inputs. Sampling temperature, model drift and vague rubrics cause the jitter; k-sampling and a noise band fix it.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comAGENTS.md Is Advisory. Here's How to Make It Enforceable
AGENTS.md is used in 60,000+ repos but it's just prose no one verifies. getff shows how to bind every claim to a live test and CI gate, making the doc enforceable rather than advisory.
How to Shrink a Docker Image From 1.2GB to 180MB
A practical guide to cutting Docker image size by 85% without touching app code: multi-stage builds, slim base images, layer ordering and .dockerignore.
Ota Pressure-Tests Its .NET Contract on OrchardCore
Ota tested its readiness contract on OrchardCore, making dotnet restore a first-class dependency step and proving a narrow, honest .NET slice instead of overclaiming.
Refactyl's verifier had more bugs than the code it checked
Refactyl's Vue 3 migration gate silently rejected valid code due to an AST reuse bug. A case study on why verifiers must check the exact artifact that ships.
Bitrise Build Cache now caches React Native's C++ too
Bitrise unifies Gradle, Xcode and ccache caching under one command for React Native, finally caching the C++ that CI kept recompiling on every build.
GitLab vs GitHub in 2026: Integrated Platform vs. Composable Ecosystem
Explore the differences between GitLab and GitHub in 2026: integrated platform or composable ecosystem? Which one suits your needs best?