A new repository_creation:write permission lets an app, agent, or fine-grained PAT create repositories without repository_administration:write (which also allows delete and transfer), and installation_repositories:write lets automation add or remove repos from app installations without a classic PAT. GitHub Apps also gain offline_access for refresh tokens, easing a move back to expiring user tokens.
Chainguard opened a beta waitlist for Harness: it rebuilds your app from source in an isolated, no egress microVM, lets Claude Mythos 5.1 probe the live instance for exploitable vulns, and ships only findings that replay plus fixes that stop them—each reviewed by a Chainguard engineer. Buy it through Anthropic’s Claude Marketplace and apply existing Anthropic commitments…
Secret scanning now detects anthropic service api key and anthropic user api key , and push protection blocks commits containing them by default on any repo with secret scanning on, free public repos included. Salesforce also joined as a revocation partner and Cloudsmith API keys are now detected…
Now in beta, Checks lets coding agents run CI mid session in credential free, egress restricted microVMs from warm dependency snapshots, with failure logs fed back into the agent's context. Each passing run emits a signed attestation that merge gates can verify instead of re running the test suite…
NinjaOne launched Katana AI (early access), an in console agentic technician that summarizes device health and recommends fixes technicians must approve, plus a NinjaOne MCP server so external AI agents can reach NinjaOne data and actions under existing RBAC and OAuth…
Cursor added Gemini 4 Argon with high/medium/low/minimal effort levels; at default medium it scores 52.8% on CursorBench, roughly matching Opus 5.5 Medium. Usage draws from the third party Other Models pool at $2/M input and $10/M output…
Spotted something we missed? Start a thread.