CI and Release Gates Archives

Engineer reviewing GitHub Actions workflow triggers and permissions

Copilot Code Review Agent Skills and MCP: A Security Review Checklist

By - CodeRiskTools Editorial
Posted on August 1, 2026
Posted in AI Code Review, CI and Release Gates

A practical security review checklist for Copilot code review agent skills and MCP tools, with bounded permissions and human approval.

Engineer reviewing GitHub Actions self-hosted runner maintenance and deployment workflow

CodeQL Action v4.37.4: Review Custom Tool Selection and Bundle Updates

By - CodeRiskTools Editorial
Posted on July 30, 2026
Posted in CI and Release Gates

A practical review checklist for CodeQL Action v4.37.4: verify repository-property tool selection, Advanced Setup precedence, the CodeQL 2.26.2 bundle, and least-privilege workflow evidence.

GitHub-Hosted Runner Groups: A Security Review Checklist for Policy-Controlled CI

By - CodeRiskTools Editorial
Posted on July 28, 2026
Posted in CI and Release Gates, Secure Coding

GitHub is adding more policy control around GitHub-hosted runners, including runner groups that can direct jobs to runners meeting an organization’s requirements and the ability to disable standard hosted runners. That is useful for platform teams, but a policy setting is not the same thing as a verified security boundary. The practical question is: what

GitHub Actions Self-Hosted Runner Minimum Version Enforcement: July 31 Readiness Checklist

By - CodeRiskTools Editorial
Posted on July 20, 2026July 20, 2026
Posted in CI and Release Gates, Secure Coding

A source-backed inventory, canary, and rollback checklist for GitHub Actions self-hosted runner minimum-version enforcement.

Developer verifying a GitHub Copilot security review finding against an exact code change

GitHub Copilot /security-review: Verify AI Findings Before You Commit

By - CodeRiskTools Editorial
Posted on July 15, 2026July 17, 2026
Posted in AI Code Review, CI and Release Gates

A practical workflow for scoping, verifying, testing, and recording GitHub Copilot /security-review findings before code lands.

Developer reviewing a Dependabot package update after a configured cooldown

Dependabot Default Cooldown: Review Version Updates Without Delaying Security Fixes

By - CodeRiskTools Editorial
Posted on July 15, 2026July 17, 2026
Posted in AI Code Review, CI and Release Gates, Secure Coding

A practical workflow for reviewing Dependabot version updates under GitHub's new three-day default cooldown without delaying security updates.

Developer triaging an AI-labelled security detection on a pull request

GitHub AI Security Detections on Pull Requests: A Triage Workflow

By - CodeRiskTools Editorial
Posted on July 14, 2026July 17, 2026
Posted in AI Code Review, CI and Release Gates

A practical workflow for enabling, identifying, triaging, and verifying GitHub AI security detections on pull requests.

Developer reviewing GitHub Copilot browser-tool permissions and network boundaries

GitHub Copilot Browser Tools: A Security Checklist Before You Enable Them

By - CodeRiskTools Editorial
Posted on July 12, 2026July 17, 2026
Posted in AI Code Review, CI and Release Gates

A practical, source-backed checklist for scoping GitHub Copilot browser tools, limiting domains and permissions, and reviewing evidence after each agent-driven test.