Blog

Insights on CI/CD security

Articles about securing workflows, AI agents, and supply chain protection.

September 28, 2026

Introducing Chelate: Securing AI Agents in CI/CD

CI/CD pipelines are the easiest way into a software company. Learn how Chelate helps you find and fix exploitable workflows before attackers do.

September 25, 2026

Pwn Requests: The Silent Threat in Your GitHub Actions

Anyone can trigger your workflows through pull requests. Learn how pwn requests work and how to prevent them with Shrike.

September 20, 2026

AI Agents in CI: The New Attack Surface

AI agents are reading untrusted issue text and acting with real tokens. One hidden instruction can leak your secrets.