I have been experimenting with MCP servers in a few ways, and pressing on our Redgate Monitor team to add one to their system. They did, started adding tools, and are continuing to work. I’m excited.Here’s a quick look at the MCP server for Redgate Monitor (preview in July 2026).This is part of a series of posts on Redgate Monitor. Click to see the other posts.Getting StartedI’m not going to bore you with the setup and configuration. You do need to be on a 14.23 or later as the version. Your account rep can get you setup instructions, which are…
Author: drweb
Jul 31, 2026 Docker OIDC connections for GitHub Actions available for Docker Orgs Eliminate Stored Credentials in Your CI/CD Pipelines TL;DR: Docker now supports OpenID Connect (OIDC) for GitHub Actions. Your workflows can authenticate with short-lived, per-run tokens instead of stored PATs or OATs. No secrets to rotate, no credentials to leak. GitHub OIDC connections are available to organizations with Docker Team, Docker Business, or Docker Hardened Images… Greg Mondello and Dan Stelzer Read now
Who catches AI mistakes at work? Not the smartest person in the room. It has never once been the smartest person in the room.Here is the pattern I keep running into with AI mistakes at work, and it took me an embarrassingly long time to see it. The person who catches the bad output is almost never the most experienced person on the team. It is not the senior architect. It is not the one with the certifications and the strong opinions about naming conventions. It is whoever is going to get the phone call at 2am when the thing…
Las Vegas, USA, July 29th, 2026, CyberNewswireCatches rogue AI agents – and stops them in live production before they cause damageSweet Security, the proactive runtime enforcement company for cloud and AI, today announced its further expansion into AI security with Agentic AI Blocking. Sweet now blocks rogue agent behavior in real time – extending Sweet’s runtime enforcement from the cloud to the AI agents that are acting alongside it.Eighty percent of the world’s businesses are already AI enterprises, and their agents take on identities, reach sensitive data, and act on their own. Yet no one verifies that the behavior an…
The gap between how fast AI writes code and how reliably teams verify it is quietly becoming a balance-sheet risk. Enterprise leaders are learning to measure it before it forces repayment.Every engineering organization that adopted AI coding assistants over the past two years has quietly taken on a liability that never appears on the dashboards leadership actually reviews. Developers now generate more code than their teams can meaningfully verify, and the gap between the two compounds on every passing build until an incident forces the account to settle.The cost tends to land late and all at once, usually as an…
Linux provides tons of command line utilities that Linux administrators learned years ago are now outdated. They still work, the man pages are still there, and nobody’s going to stop you from using them, but most are no longer actively maintained. Modern replacements do the same job more efficiently and are available by default on most Linux distributions. Many of older commands are networking utilities that are provided by the net-tools package, which has not been actively maintained for years. Some Linux distributions don’t even install it by default anymore. Here are 9 deprecated Linux commands, why they were replaced,…
Modern engineering teams have invested heavily in observability. Dashboards are populated, alerts are configured, on-call rotations are set. Yet when production incidents occur, the average time to resolution hasn’t dropped nearly as fast as the tooling has improved. The reason, in many cases, comes down to one overlooked gap: logs aren’t being used the way they should be during active incidents.This isn’t a tooling problem. Most organizations already have log data flowing somewhere. It’s a workflow problem, specifically, how logs integrate (or fail to integrate) into the broader incident response process.The Three-Tool ProblemA typical incident response scenario looks something like…
Open source can be just as safe as proprietary software, though government agencies (and private enterprises) should take additional measures to secure it properly, according to a new guide published by the U.S. Cybersecurity and Infrastructure Security Agency (CISA).The report, “Open Source Software: Security Principles and Practices,” provides with guidance to help agencies comply with two Presidential Executive Orders (14144 and 14306) which both urged them to do a more thorough job securing the software they use, a response to recent exploits like Log4Shell and XZ utils. CISA acknowledges that open source can provide immeasurable benefits to government agencies, not…
The sizes attribute for was maybe the hardest part. It had complicated syntax that always had to be in sync with whatever your CSS was doing. But sizes=”auto” support is almost ready for prime time. Jason Grigsby says we can go a step further an remove srcset too, which is nearly just as complex, and requires having a system to produce multiple images. Jason’s thinking is that we can use newfangled Client Hints to send to the server what size image we need, it responds in kind, and we’re back to a pretty basic situation. Well, do lazy loading too,…
Jul 31, 2026 Docker OIDC connections for GitHub Actions available for Docker Orgs Eliminate Stored Credentials in Your CI/CD Pipelines TL;DR: Docker now supports OpenID Connect (OIDC) for GitHub Actions. Your workflows can authenticate with short-lived, per-run tokens instead of stored PATs or OATs. No secrets to rotate, no credentials to leak. GitHub OIDC connections are available to organizations with Docker Team, Docker Business, or Docker Hardened Images… Greg Mondello and Dan Stelzer Read now