From pull request to npm: protecting secrets and publishing rights
Separate secrets, merge and npm publishing with GitHub rules and OIDC trusted-publishing configurations.
Topic
CI/CD
Alternative text and AI: why an automated audit is not enough
AI can help identify vague or inconsistent alternative text, but it does not fully understand editorial intent or users' real experience. Here is a reliable method for integrating it into an accessibility audit.
CI/CD On-Call AI Agent: Architecture, Permissions, and Safeguards
An agent can accelerate the collection of evidence during an incident, provided that it starts in read-only mode, separates diagnosis and action, and measures its reliability.