Search for a command to run...
Articles tagged with #security
GitHub says the staged rollout of stateless GitHub App installation tokens, which began on April 27, 2026, is complete. Newly minted installation tokens still start with ghs_, but they are now about 5
What can a Claude Code mod actually do on my machine, and what should I review before I allow one? A mod runs inside Claude Code, without a sandbox, using the permissions of the user who installed it.
Cursor's AIUC-1 certification is useful evidence about how its agents were tested — and it changes nothing about your repository's own guardrails. The certification covers Cursor's controls, not your
If you use an AI coding assistant that can clone repositories, run shell commands, and commit on your behalf, you have given a fast, tireless junior developer access to your machine. Most of the time
Opening an untrusted repository should be a review, not a code-execution event. On Windows, a reported Cursor IDE flaw tracked as CVE-2026-63093 breaks that assumption: attacker-controlled files place
Pin a no-training endpoint in your team's .env # Pin your team's no-training route in .env echo 'OPENAI_BASE_URL=https://api.openai.com/v1' >> .env echo 'OPENAI_ORG_ID=org_xxxxx' >> .env # NOTE: reten
