
Researchers at Apiiro have found over 100,000 .claude/settings.local.json files pushed to public GitHub repositories. Of those, around 1,100, from 63 different organisations, had secrets inside: database passwords, API …

Alpine Linux has published an incident report on its GitLab instance with a lesson I think is very useful for anyone maintaining their own container images: they upgraded GitLab to a fixed version and were still …

Yesterday I wrote about a Harvard study showing that AI agents write far more code, but the gain gets lost in review. Today Anthropic published Redesigning source control at Anthropic, which tells the other side of the …

Git 3.0 will bring several breaking changes, and one of them will affect almost everyone even though it gets little attention: new repositories will use SHA-256 instead of SHA-1 to identify commits, trees and files. …

One of Go’s most practical ideas is that an import path is both the package name and the place to download it from. You write import "github.com/user/library" and the go command knows it has to go to …