June 8, 2020 – Carlos Castro

Hello everyone, I hope you all are doing well. Today I had to search something about Visual Studio Code and then I decided, why not start the blog with some tips about VS Code? VS Code is a powerful IDE to code anything you want in whatever language you like. Continue Reading

GitHub’s Security Autofix Agent Now Remembers What It Fixed September 28, 2026

GitHub’s agentic autofix now uses Copilot Memory to reuse repository-specific security fix patterns, helping Copilot apply lessons from past vulnerabilities across future alerts, reviews and coding workflows.

Leaked GitLab Email Tokens Can Reach Code, Secrets and CI/CD Pipelines September 25, 2026

Security researchers have uncovered a GitLab behavior that could let attackers use a leaked project email address to push code, trigger CI/CD jobs and reach other repositories accessible to the address owner. Aikido Security researcher Joe Leon detailed the attack path this week in a blog post after reporting it to GitLab earlier this year. […]

Blitzy Makes Sandbox for Reverse Engineering Code Available at No Cost September 25, 2026

Blitzy has made available a sandbox where DevOps teams can reverse-engineer up to one million lines of code, generate up to 25,000 lines of tested end-to-end code, and identify security vulnerabilities across a codebase at no cost. Dan Ochs, director of AI solutions consulting for Blitzy, said the provider’s Proactive Insights platform uses multiple artificial […]

Dependency Mocking Approach That Gets More Accurate as Your Services Deploy More Often September 25, 2026

Traffic-based dependency mocking turns frequent upstream deployments into opportunities to refresh mocks from real behavior and reduce integration test drift.

Why Old Azure DevOps Releases Survive a Pipeline Cutover September 25, 2026

Old Azure DevOps Classic releases can retain retired deployment tasks, Helm names, image paths and variables long after a pipeline cutover, leaving stale redeploy paths active.

DevSecOps Teams as Partners in Secure Software Delivery September 25, 2026

DevSecOps teams can reduce last-minute release delays by shifting security decisions earlier, improving guardrails, clarifying ownership and making findings actionable.

Why Plan Review Stopped Working September 24, 2026

The control that held your infrastructure together was plan review, meaning a person reading a diff and deciding whether to approve it. Not the policy document and not the pipeline configuration. It worked because change arrived at human speed. That condition no longer holds. An agent opens 40 pull requests before lunch. Reviewers approve them […]