A developer demonstrated a four-step container image verification workflow against the soit-ai/soit server v1.0.0 release, showing that fetching by digest, verifying provenance, reading the SBOM, and …
By 2026, 'Vibe Coding' — a workflow where humans orchestrate autonomous AI agents to generate, test, and deploy software — has become mainstream in European engineering teams, driven by regulatory pre…
ProofRun, a five-day-old Go CLI with 12 stars on GitHub, treats coding-agent test claims as cache entries that expire, binding results to a SHA-256 hash of the code state and marking them STALE when c…
IBM and Red Hat announced an expansion of Lightwell with new commercial offerings to help organizations establish trusted, verifiable software supply chains for AI-assisted development. The offerings …
In May 2026, 84 malicious package versions were published through TanStack's own CI/CD pipeline with cryptographically valid SLSA provenance attestations, spreading to 169 packages and 373 malicious v…
ONNX v1.22.0, published June 30, introduces Opset 27 with LinearAttention and CausalConvWithState operators that enable modern hybrid LLMs to export cleanly to ONNX for the first time, alongside WebAs…
MarketNow built a 6-layer audit pipeline called Sentinel that tests for 7 of the 10 OWASP MCP Top 10 risks. The pipeline uses active probes, sandboxing, dependency scanning, and weekly re-audits to de…
Matrix Scroll is an open-source tool that attaches signed provenance envelopes to Git commits, recording whether a human or an AI agent authored the change. It enables offline verification of commit a…