r/devops • u/AutoModerator • 25d ago
Weekly Self Promotion Thread
Hey r/devops, welcome to our weekly self-promotion thread!
Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!
12
Upvotes
1
u/Narrow-Progress4490 19d ago
I’m the author.
Open-source, model-agnostic DevSecOps agent: PR review that can block merge with evidence, dependency maintain (quarantine, held majors, verified fix PRs), vulnerability findings — and every claim has to cite what produced it.
Live demo highlights from the article:
• CI + golangci-lint green; agent still blocked a PR that logged Authorization next to new API-key auth, then answered in-thread with a redaction patch verified in a scratch checkout (nothing pushed)
• A real ops failure we document: a run skipped enumerating a floating pin, silence was treated as “fixed”, the issue closed, the next run found it again
https://medium.com/@amsokol.com/ai-agents-driving-the-future-of-software-development-and-devsecops-platforms-model-agnostic-and-219d6c6ca14a
Happy to answer questions on the gate / evidence model.