Engineering Insights

Expanded OIDC support for Dependabot and code scanning

Dependabot and code scanning now support OpenID Connect (OIDC) authentication for private registries configured at the organization level for two additional registries: Cloudsmith and Google Artifact Registry. What’s new Organization… The post Expanded OIDC support for Dependabot and code scanning appeared first on The GitHub Blog.

Scaling Airbnb’s identity graph with a unified knowledge graph infrastructure

Azure hub-and-spoke generally available for HCP Vault Dedicated

Azure hub-and-spoke networking for HCP Vault Dedicated is now generally available, enabling enterprises to integrate Vault directly into centralized Azure network architectures without custom routing, bespoke peering patterns, or Vault-specific exceptions.   The latest release expands the support available to Vault customers who require a clean separation of product and infrastructure management scaled for complex networking architectures. Organizations that require platform standardization and

Improving DAG Failure Detection in Airflow Using AI Techniques

Apache Airflow is widely used to orchestrate ETL pipelines, but failure handling in large-scale environments remains largely reactive. While Airflow provides strong scheduling and execution primitives, identifying root causes and detecting silent data issues still requires significant manual effort. This article presents an approach implemented in a production data platform to improve failure detection and diagnosis using a combination of large language models (LLMs), statistical methods, and tr

Using HTTP/2 Cleartext for a server in Go 1.24

Comments

Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Android device users. The activity, per HUMAN's Satori Threat Intelligence and Research Team, encompassed 455 malicious Android apps and 183 threat actor-owned command-and-control (C2) domains, turning the infrastructure into a pipeline for multi-stage fraud. "Users

Maintainability sensors for coding agents

In her recent article about harness engineering for coding agent users, Birgitta Böckeler laid out a mental model for expanding a coding agent harness: a system of guides and sensors that increase the probability of good agent outputs and enable self-correction before issues reach human eyes. Birgitta has now started publishing an article where she walks though her experiences using sensors to keep a codebase maintainable. This part looks at static analysis wi

Agentic Testing: Moving Quality From Checkpoint to Control Layer

Agentic testing raises the bar for quality leadership. As AI agents enter test planning, scenario generation, script creation, execution, failure analysis, and self-healing, QA leaders are no longer governing only test assets, automation suites, and defect workflows. They are governing an AI-assisted decision system that directly affects release confidence. That changes the standard.