Security

4 articles on Security — deep dives on software engineering and building with AI.

Stop terminating state-changing agent callbacks on Quick Tunnels
If your coding agent can publish a package, you need a release firewall
If agents can leave notes, your eval stopped measuring individuals
GitHub Actions OIDC should trust workflows, not repositories