Related reading
Securing AI Pull Requests: Building a Deterministic AST Audit Harness in GitHub Actions
A step‑by‑step tutorial for building a deterministic AST‑based security scanner that runs in GitHub Actions to catch prototype‑pollution, high‑entropy secrets, and unauthorized network egress in AI‑generated pull requests.
SitePointsitepoint.com19 minWe now auto-approve and merge 15% of PRs
This article describes how a team implemented a bot to auto-approve and merge 15% of low-risk pull requests, aiming to reduce code review bottlenecks and improve development velocity. The system relies on custom deterministic linters, basic end-to-end tests, and a risk scoring mechanism to identify safe changes.
Swizec Tellerswizec.com3 minBuilding Multi-Tier CI/CD Verification Gates for AI Pull Requests
AI-generated code often passes basic CI but contains subtle bugs like vacuous tests or off-by-one errors. This article details a multi-tier CI/CD pipeline using AST analysis, property-based testing, and mutation testing to catch these issues and annotate GitHub PRs with actionable SARIF reports.
SitePointsitepoint.com17 minCheckout a Github pull request from one-off contributions
Adds a git alias that fetches and checks out a branch from a contributor’s fork in one command, avoiding dependence on the GitHub `gh` CLI.
Mozilla Automation Teamjonalmeida.com2 minCloudBees vs Harness: Why Migration Isn't the Fix
The article argues that Harness’s “free migration” offer hides significant downstream costs (training, pipeline rebuilds, compliance recertification) and that even after migration you still lack unified governance across heterogeneous CI/CD tools. CloudBees positions its Unify control plane as a tool‑agnostic layer that adds visibility, continuous governance, AI‑driven test selection, and hybrid…
Codeshipcloudbees.com5 minTwo Claude accounts, one session
claude-swap is a CLI tool that watches your Claude usage and automatically swaps to a secondary account when the active account hits 90% of its quota. Install via pipx, add accounts, and run `cswap auto` (or its dashboard) to keep sessions alive, though each swap incurs a cold‑cache cost.
Bjørn Johansenbjornjohansen.com1 min
