CI/CD
206
MENTIONS
108
EPISODES
89
PODCASTS
Search complete. 206 mentions across 108 episodes found for "CI/CD".
Sep 12, 2026
Cyber Mornings Daily - September 12th, 2026
S
5:54speaker_0HOST
Yeah, I want to make sure the severity of that specific target is really clear to whoever's listening.
S
5:58speaker_0HOST
Like, why are attackers so obsessed with GitLab? Why are CICD pipelines, you know, these continuous integration and deployment systems, such a massive target?
S
6:09speaker_1HOST
You have to look at what a CICD pipeline actually controls.
S
6:12speaker_1HOST
It is the absolute apex of the software supply chain.
S
6:16speaker_1HOST
Right.
S
6:17speaker_1HOST
It does.
S
6:17speaker_1HOST
Attackers want access to your proprietary source code so they can hunt for other hidden zero day vulnerabilities.
S
6:24speaker_1HOST
But the real prize, honestly, is the CICD secrets.
#107 - Continuous Integration in 2026: What Still Matters
A
11:03AndreHOST
Yeah.
A
11:05AndreHOST
But I think, yeah, I still see the distribution between, you know, having dedicated instance for CI, having, you know, one for CD or sometimes even two for CD that you have non-pro for CD and production for CD separately, especially in the bigger organizations, which are a bit more legacy.
A
11:25AndreHOST
You still have Jenkins in your case when you have more centralized set for it.
P
11:30PaulinaHOST
Yeah, so if you don't have money for GitHub Enterprise, you run Jenkins.
A
12:09AndreHOST
I've seen in the past in some organizations.
P
12:12PaulinaHOST
Depends.
P
12:12PaulinaHOST
Well, nice thing about GitHub Action is, so a lot of CI, CD servers, their philosophy is that you get one file one CICD pipeline, whatever file per repo, like for instance with Jenkins.
P
12:29PaulinaHOST
I don't know if that changed, but back in the day, you could only have like one Jenkins file per repo and that was it.
#104 - When AI Coding Gets 10x More Expensive
A
9:06AndreyHOST
It's also possible.
A
9:07AndreyHOST
I've seen people doing that a lot on CICD, for instance, because in the end of the day, most of those coding agents, they're just JavaScript programs that could be quickly installed in the GitHub Action Runner, for instance.
A
9:22AndreyHOST
And then if you have your private roles, you can consume through the role, then you can do a code review.
A
9:28AndreyHOST
We actually have a blog post that I will... link to the show notes like one of the consultants in Firefox self-wrote it where how you can define the role and that will be like so basically you can set a cup uh through the i am on uh bedrock spending which was like not the obvious thing to do like it's not very obvious how to do it but it's actually possible and then you can say like well start declining requests on the i am level when we like spend three thousand
Managing technical debt in fast-growing startups
A
18:22Alex AntoniukHOST
Every change comes with a tax.
A
18:25Alex AntoniukHOST
The debt has reached its terminal stage when it touches architecture, tests, CICD, docs, and processes.
A
18:34Alex AntoniukHOST
One change triggers a dozen others.
A
18:37Alex AntoniukHOST
So, the signals are clear.
DevOps Strategies for Teams to Ship Faster by Balancing Cost Quality and Speed with Jason Furgal
J
30:46Jason FurgalGUEST
And I think we just we can't be as loose as we have been.
J
30:49Jason FurgalGUEST
But we're going to build everything, which is a great answer for a CICD from a CICD perspective to say, every time there's a change, we're going to build for 20 products.
J
30:57Jason FurgalGUEST
We're going to build for five different chips.
J
31:00Jason FurgalGUEST
Is that necessary? You know, that's not as much fun, but can you do that a little bit smarter where maybe you build for one representative tool chain and that covers half of what you need.
153 Million Driver's Licenses Stolen, Nigerian Sextortion Rings, and Team PCP's OPSEC Failure
L
34:40Low LevelHOST
And those are going out and like shy looting the entire internet.
L
34:43Low LevelHOST
Around that time, Team PCP got really into this thing where they were attacking vulnerable instances of CICD.
L
34:52Low LevelHOST
For example, when you're on GitHub, if you submit a pull request to a repo, if the repo is not set up properly, if it uses the wrong kind of pull request, you can get a CICD action to fire on behalf of the maintainer of the repo with your data in the pull request.
L
35:11Low LevelHOST
If, for example, like a bash script runs that uses data from your pull request, you can use that to compromise the CI CD instance.
L
35:19Low LevelHOST
Okay.
LIU022: Chris Grundemann – From Pulling Cable to Network Automation Forum
A
10:43Alexis BertholfHOST
I wonder, I guess especially when you're pushing code into production on a network level.
A
10:52Alexis BertholfHOST
To give you guys a bit of background, I was just on a call earlier and we were talking about Megaport acquired a bare metal company, right? And one of the use cases that they're seeing a lot of is they have AI agents that are continuously testing for CICD, right? They'll go, they will make code improvements, they will deploy their own compute instance on our bare metal farm by themselves, make sure it works, and then push the change into prod.
A
11:21Alexis BertholfHOST
So if we're looking at that from an infrastructure perspective or from a network perspective, can you take something like a forward networks where it is, what's the term for what they do? It's like- Digital twin? Yeah, a digital twin, right? Where you have a digital twin of your environment You have an AI agent or an instance where you can go and take a snippet of code from AI, deploy it in your digital twin to make sure nothing breaks, and the change is actually doing what you want it to before you actually apply it to production.
C
11:53Chris GrundemannGUEST
And that's where I think, yes, I think there's some...
Your Developers Are Building Their Own Roads. Now What?
D
3:42David CurlewisGUEST
And so we build for the most users.
D
3:45David CurlewisGUEST
If you wanna get from point A to point B, whether that's, you know, CICD systems or, you know, mailing systems, whatever it might be, we'll build the platform that allows you to kind of decouple your thinking.
D
3:55David CurlewisGUEST
You can just think about the product, the customer.
D
3:57David CurlewisGUEST
You don't have that cognitive overhead of maintaining everything else down to the nuts and bolts.
LIU022: Chris Grundemann – From Pulling Cable to Network Automation Forum
A
10:43AlexisHOST
I wonder, I guess especially when you're pushing code into production on a network level.
A
10:52AlexisHOST
To give you guys a bit of background, I was just on a call earlier and we were talking about Megaport acquired a bare metal company, right? And one of the use cases that they're seeing a lot of is they have AI agents that are continuously testing for CICD, right? They'll go, they will make code improvements, they will deploy their own compute instance on our bare metal farm by themselves, make sure it works, and then push the change into prod.
A
11:21AlexisHOST
So if we're looking at that from an infrastructure perspective or from a network perspective, can you take something like a forward networks where it is, what's the term for what they do? It's like- Digital twin? Yeah, a digital twin, right? Where you have a digital twin of your environment You have an AI agent or an instance where you can go and take a snippet of code from AI, deploy it in your digital twin to make sure nothing breaks, and the change is actually doing what you want it to before you actually apply it to production.
C
11:53Chris GrundemannGUEST
And that's where I think, yes, I think there's some...
LIU022: Chris Grundemann – From Pulling Cable to Network Automation Forum
A
10:43AlexisHOST
I wonder, I guess especially when you're pushing code into production on a network level.
A
10:52AlexisHOST
To give you guys a bit of background, I was just on a call earlier and we were talking about Megaport acquired a bare metal company, right? And one of the use cases that they're seeing a lot of is they have AI agents that are continuously testing for CICD, right? They'll go, they will make code improvements, they will deploy their own compute instance on our bare metal farm by themselves, make sure it works, and then push the change into prod.
A
11:21AlexisHOST
So if we're looking at that from an infrastructure perspective or from a network perspective, can you take something like a forward networks where it is, what's the term for what they do? It's like- Digital twin? Yeah, a digital twin, right? Where you have a digital twin of your environment You have an AI agent or an instance where you can go and take a snippet of code from AI, deploy it in your digital twin to make sure nothing breaks, and the change is actually doing what you want it to before you actually apply it to production.
C
11:53Chris GrundemannGUEST
And that's where I think, yes, I think there's some...
98 more episodes mention CI/CD.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.