Why OpenAI Had To Build A Real Windows Sandbox For Coding Agents
OpenAI's new Windows sandbox work for Codex shows that useful coding agents cannot live on vague trust. They need operating-system boundaries that match real developer workflows.
// Topic
Developer Tools
Composer Turned a Token Format Change Into a CI Secret Leak
A small GitHub token format change exposed a brittle security assumption in Composer and turned ordinary GitHub Actions logs into a credential leak path for PHP teams.
GitHub Wants AI Agents To Catch Secrets Before Git Does
GitHub's new generally available MCP secret scanning turns credential leaks into a live coding-time problem instead of a post-commit cleanup job. That is exactly where AI agents need security guardrails.
End of list