#ci

0 stories this week · 1 this month · 4 in 6 months · mostly AI

Stories per day · 30 days

4 stories, newest first · one card per story

Trails score every push with agent evals, and gates can block merges until findings, human approval, and CI pass.

9 min readentire git

ansi2html before 1.9.4 converted crafted sr.ht CI log lines into HTML, enabling XSS for viewers.

Stored XSS in SourceHut's ansi2html can run script from CI build logs and enable account takeover.

Anthropic ships a plugin evals workflow for Claude Code with six grader types, a no-plugin baseline arm, and a CI gate via threshold and cost flags.

Stories tagged #ci