Hugging Face introduced a new Kernels update on July 6, adding a dedicated Hub repository type, trusted publisher gating, code signing via Sigstore, and enhanced provenance metadata to make custom AI …
OpenAI launched Patch the Planet, a program with Trail of Bits that uses AI to find and fix vulnerabilities in open-source software, addressing growing supply chain risks. The initiative has already i…
Trail of Bits engineers, in partnership with OpenAI's Daybreak initiative, launched Patch the Planet, a week-long effort using frontier AI models like GPT-5.5-Cyber to find and fix vulnerabilities in …
Matrix Scroll is an open-source tool that attaches signed provenance envelopes to Git commits, recording whether a human or an AI agent authored the change. It enables offline verification of commit a…
Equiv, a new open-source tool, checks that an AI refactor did not change what code does by running changed functions against previous versions on deterministically generated inputs and reporting behav…
Llm-cli-gateway 2.0.0, released June 4, 2026, eliminates a major supply-chain vulnerability by replacing the `better-sqlite3` native module with Node's built-in `node:sqlite` driver. The change remove…