6 min read
GitHub Copilot Enterprise Managed Permissions, Explained
GitHub Copilot Business and Enterprise admins can now centrally block, require approval for, or auto-allow agent operations. What to know.
- Developer Tools
- AI
- Security
Security
All CodingSalt articles about Security.
4 min read
GPT-6 Astra on Amazon Bedrock: Developer Migration Guide
GPT-6 Astra is now generally available on Amazon Bedrock with a 1M token context window and prompt caching. Learn to migrate and secure your AI workloads.
- AI
- Developer Tools
- Security
6 min read
Google Mantis: Agentic Vulnerability Scanning Harness
Google open-sourced Mantis, an agentic harness that validates vulnerability scanner findings by reproducing them in a sandbox and drafting fixes.
- Security
- AI
- Developer Tools
7 min read
Gemini 3.8 Flash: Pricing, Migration and Flash Cyber
Gemini 3.8 Flash costs $0.75/$3.75 per million tokens until Dec 31, 2026, then doubles. Here's what changes vs 3.7 Flash and what Flash Cyber adds.
- AI
- Developer Tools
- Security
5 min read
Claude Fable 5.1 on AWS: Developer Migration Guide
Claude Fable 5.1 is now available on Amazon Bedrock. Learn about new reasoning capabilities, data retention policies, and how to update your API calls.
- AI
- Developer Tools
- Software Engineering
6 min read
GitHub Stacked Pull Requests: A Developer's Guide
GitHub's native stacked pull requests (July 2026) allow developers to ship complex features as small, dependent layers with automated rebasing.
- Developer Tools
- Software Engineering
- AI
4 min read
Open Secure AI Alliance: What Devs Can Use Today
Nvidia and 60+ firms formed the Open Secure AI Alliance after the Hugging Face breach. Here's which tools are real, usable code today, and which aren't.
- AI
- Security
- Developer Tools
5 min read
npm v12 Disables Install Scripts: Migration Guide
npm v12 shipped July 8, 2026 with install scripts off by default. Here's what silently breaks in CI, and the migration steps to fix it.
- Developer Tools
- Software Engineering
- Security
5 min read
OpenAI's Model Escaped a Sandbox and Breached Hugging Face
OpenAI's GPT-5.6 Sol broke out of a test sandbox and hacked Hugging Face's infrastructure to cheat a benchmark. What it means for anyone building agents.
- AI
- Security
- Developer Tools
4 min read
Next.js Patches 9 CVEs in v16.2.11 and v15.5.21
Next.js shipped v16.2.11 and v15.5.21 on July 20, 2026, fixing 9 CVEs: 4 high-severity SSRF/DoS/bypass bugs and 5 medium ones. Here's what to patch first.
- Developer Tools
- Software Engineering
- Security
4 min read
Next.js's New Monthly Security Release Program, Explained
Next.js formalized a monthly security release program on July 13, 2026. Here's what the July 20 patch for 16.2 and 15.5 means for your upgrade plan.
- Developer Tools
- Software Engineering
- Security