security
Data residency for AI coding tools in regulated industries
Data residency requirements force regulated industries to run AI coding tools within specific geographic and organizational boundaries to maintain compliance.
2026-09-098 min read
Goatfied blog
Benchmarks, deployment notes, and hard-won patterns
Developer-to-developer writing. No fluff. Just what worked, what failed, and what shipped.
Filter by category
Filter by tag
All#workflows#security#refactoring#open-source#models#deployment#benchmarks#agent-loop#self-hosted#gpu#infra#devex#debugging#apps#agents#planning#tools#benchmark#cursor#copilot#code-review#triage#automation#pull-requests#architecture#reliability#case-study#strategy#trust#onboarding#telemetry#ux#inline-diff#ghost-text#lsp#completion#context#sandboxing#secrets#prompting#testing#docs
security
Audit logging for autonomous code changes
Audit logging captures authorization chains, decision paths, and constraint checks when AI agents modify code autonomously beyond standard Git metadata.
2026-09-088 min read
security
Supply-chain risk in AI-suggested dependencies
AI coding assistants suggest dependencies based on training data, not current security status, bypassing supply-chain controls and introducing typosquats or compromised packages.
2026-09-078 min read
security
Scoping repository credentials for autonomous agents
Learn how to scope repository credentials for AI agents to limit access, reduce blast radius, and prevent unauthorized operations across your codebase.
2026-09-068 min read
security
Prompt injection in code repositories is a real attack surface
Prompt injection in code repositories allows malicious instructions in README or config files to manipulate LLM agents that read, commit, or execute code autonomously.
2026-09-058 min read
security
Sandboxing untrusted tool calls in developer workflows
Sandboxing untrusted tool calls isolates AI agent actions from production systems, preventing destructive commands through containerization and permission boundaries.
2026-09-048 min read
security
Secret detection before an agent ever runs a tool
AI agents generate and commit code faster than post-commit scanning can catch secrets, requiring detection before file creation rather than after.
2026-09-038 min read
security
PR triage automation with risk scoring
PR triage automation uses risk scoring to prioritize code reviews based on change impact, contributor history, and affected systems rather than simple rule-based labels.
2026-03-1811 min read
security
Pull request summaries that engineers actually read
Pull request summaries improve code review quality by stating what changed, why it changed, and what risks need scrutiny without assuming shared context.
2026-02-2810 min read