supply-chain
2 posts — newest first.
-
The Deployment Pipeline: Build Once, Promote Everywhere
If your artifact is rebuilt per environment, staging never tested what production runs. Build once, promote everywhere is the rule the rest of CD rests on.
-
Your agent installs Markdown from the internet and runs it. We spent 20 years learning not to do that.
Agent skills are dependencies with none of the controls. What the 2026 research found, why scanners miss it, and seven fixes for platform teams.