InfoQ

How Pinterest Secures AWS Infrastructure at Scale with a Centralized Terraform Pipeline

Claudio Masolo — Mon, 10 Aug 2026 10:00:00 GMT

Pinterest has revealed the Resource Provisioner Pipeline (RPP), its own Terraform execution engine. It ensures least-privilege access and needs dual-control reviews. This is important for the company’s AWS infrastructure, as it adds strict guardrails to the GitHub Actions workflows.

By Claudio Masolo

Presentation: Leveraging Adversary Emulation for GenAI Red Teaming

Kennedy Torkura — Mon, 10 Aug 2026 09:32:00 GMT

Kennedy Torkura discusses practical GenAI red teaming techniques to safeguard LLMs and knowledge bases against security threats like data poisoning and LLMjacking on AWS. He explains how engineering leaders and architects can bridge traditional cloud security with MITRE ATLAS frameworks to proactively identify vulnerabilities, implement guardrails, and secure production AI applications.

By Kennedy Torkura

GitHub Code Quality Targets Maintainability as AI-Generated Code Increases

Matt Saunders — Mon, 10 Aug 2026 08:00:00 GMT

GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team. The service combines CodeQL analysis with AI-assisted detection of maintainability and reliability problems, then uses Copilot Autofix to suggest changes for review in pull requests, according to an announcement from GitHub.

By Matt Saunders

Buildpacks Move the Container Hardening Control Point Away From the Dockerfile

Mark Silvester — Mon, 10 Aug 2026 07:00:00 GMT

Cloud Native Buildpacks, which graduated within the CNCF in July 2026, move base image choice out of per-service Dockerfiles into a single builder owned by platform engineering, enabling fleet-wide patching. BellSoft's hardened Paketo builder is the latest sign that vendors now treat the builder, not the Dockerfile, as the container security control point.

By Mark Silvester

Google Releases Angular v22 with Stable Signal Forms, OnPush by Default and Experimental WebMCP

Daniel Curtis — Mon, 10 Aug 2026 06:12:00 GMT

Angular v22, Google's TypeScript-first framework, has introduced API stabilizations, ergonomic templates, and tooling enhancements for AI integration. Key developments include the stabilization of Signal Forms, improved change detection strategies, and a new @Service() decorator for dependency injection. The release supports TypeScript 6 and removes deprecated features.

By Daniel Curtis

Beyond Consensus: The Fragmentation of AI Policy Across the Linux Ecosystem

Olimpiu Pop — Mon, 10 Aug 2026 04:04:00 GMT

The AI policies across the Linux ecosystem are very heterogeneous, ranging from the GCC’s restrictiveness, the Linux kernel’s pragmatism, to the more open disclosure-based utility model of Kubernetes' landscape. From core infrastructure to high-level orchestration, these distinct approaches highlight a shared commitment: ensuring the human maintainer remains the indispensable guardian of the code.

By Olimpiu Pop

Stripe Uses Graph Search and State Machines to Automate Database Remediation

Renato Losio — Sun, 09 Aug 2026 06:55:00 GMT

The engineering team at Stripe recently described how they automated database incident recovery by modeling their global infrastructure as a graph. Using graph search algorithms together with state machines, the team computes and executes remediation plans automatically.

By Renato Losio

Presentation: Keeping ChatGPT Fast as AI Development Accelerates

Martin Spier — Sat, 08 Aug 2026 09:00:00 GMT

Martin Spier explains how agentic workflows dramatically increase code change volume at OpenAI. He discusses the hidden systemic performance costs of rapid shipping beyond GPUs, and shares how deploying always-on AI agents automates profiling, regression detection, and continuous optimization to maintain product speed and scalability at massive global scale.

By Martin Spier

Cloudflare's Precursor Detects Bots and AI Agents through Continuous Behavioral Analysis

Renato Losio — Sat, 08 Aug 2026 07:54:00 GMT

Cloudflare recently introduced Precursor, a client-side behavioral analysis engine that continuously evaluates session interactions, such as mouse movements and keyboard timing, to improve detection of sophisticated bots and AI agents without relying solely on one-time challenges like CAPTCHAs.

By Renato Losio

GitHub Hardens npm and Actions Defaults, Drawing Debate over Delays versus Signing

Steef-Jan Wiggers — Sat, 08 Aug 2026 07:45:00 GMT

GitHub consolidated the npm and Actions changes it shipped from March to July 2026 against supply chain attacks, several of which alter defaults rather than add options. Hacker News discussion focused less on the individual controls than on whether waiting periods are the right instrument, or a substitute for author-side package signing.

By Steef-Jan Wiggers

Cloudflare Launches Persistent, Stateful, Computer-Like Environments for Agents

Sergio De Simone — Fri, 07 Aug 2026 21:00:00 GMT

Cloudflare has introduced Cloudflare Computer, a new open-source runtime designed to give AI agents something closer to a real "computer" instead of just ephemeral containers. It leverages Cloudflare isolates for fast serverless execution, making agents cheaper, faster, and more scalable, according to the company.

By Sergio De Simone

Instacart Builds Blueberry, an AI-Powered Assistant to Help On-Call Engineers Investigate Incidents

Leela Kumili — Fri, 07 Aug 2026 14:34:00 GMT

Instacart introduced Blueberry, an AI-assisted incident response system that helps on-call engineers investigate production issues faster. It combines AI agents, operational data, and historical incident knowledge to generate grounded root cause hypotheses in Slack. It uses parallel subagents, MCP integrations, and incident history to reduce investigation time while keeping engineers in control.

By Leela Kumili

AI Is Transforming Incident Response - But the Hardest Problems May Still Belong to Humans

Craig Risi — Fri, 07 Aug 2026 12:00:00 GMT

Artificial intelligence is rapidly changing how engineering teams respond to production incidents, offering the ability to summarize incident channels, analyze unfamiliar code, suggest remediation steps, generate pull requests, and increasingly assist with diagnosis.

By Craig Risi

Presentation: Rewriting All of Spotify's Code Base, All the Time

Jo Kelly-Fenton, Aleksandar Mitic — Fri, 07 Aug 2026 11:00:00 GMT

Jo Kelly-Fenton and Aleksandar Mitic explain how Spotify created "Honk," an AI coding agent, to handle complex fleet-wide codebase migrations. They share key architectural insights on decoupling CI verification runtimes from AI agents, dealing with automated pull request bottlenecks, and driving aggressive standardization across thousands of engineering repositories.

By Jo Kelly-Fenton, Aleksandar Mitic

Article: InfoQ Culture and Methods Trends Report - 2026

Fri, 07 Aug 2026 09:00:00 GMT

This report summarizes how the InfoQ Culture and Methods editorial team sees the ongoing and emergent trends in the culture and methods space in 2026.

By Shane Hastie, Ben Linders, Vanessa Formicola, Shawna Martell, Rafiq Gemmail, Craig Smith, Phillip Mortimer, Yinka Omole