AI Coding Live News — Real-Time 𝕏/Twitter Updates & Breakthroughs

Chainguard@chainguard_dev·Collected 22d ago

👀87

🔥86

Chainguard ships four MCP servers so coding agents verify images, APKs, EOL status and policy live—server-side governance instead of prompt guardrails

On 2026-10-14 Chainguard announced four MCP servers for agent supply-chain checks, generally available to enterprise customers: cg-oci (image manifests/SBOMs/provenance), cg-apk (Wolfi package equivalents), cg-versions (upstream releases and EOL), and cg-api (org policy and attestations). Any MCP client (Claude Code, Cursor, and others) connects via OAuth; pagination and response caps are enforced server-side so agents stop hallucinating tags or recommending EOL packages. Complements the same-day Harness/Checks/Workspaces launch by wiring dependency choices to live product data.

Key Takeaways

Four endpoints: https://cgr.dev/mcp, apk.cgr.dev/mcp, versions.cgr.dev/mcp, console-api.enforce.dev/mcp over Streamable HTTP + OAuth 2.0
Live data: image SBOM/provenance, Debian→Wolfi package mapping, upstream EOL history, org policy/advisories—not model memory
Governance: server-side pagination (~25–50 default, 200 max) and response caps; cg-api hides tools your token cannot use
Headless: chainctl auth login --audience=<mcp-url> plus a headersHelper Bearer injector avoids Claude Code's ~1h OAuth re-login loop
Extras: docs MCP at mcp.edu.chainguard.dev (no sign-in); Skills MCP at skills.cgr.dev/mcp for on-demand hardening skills

Read full story

Linked Models & Agents:

🤖 Claude Code 🤖 Cursor 🤖 Kiro 🌐 Chainguard 🌐 Anthropic 🌐 Cursor

#Chainguard#MCP#SBOM#Wolfi#supply chain#agent security#Claude Code#Cursor

Kilo-Org@kilocode·Collected 40d ago

👀72

🔥92

Kilo Code 7.8.1: Agent Manager browser for public HTTPS/CDN previews; CycloneDX SBOM on every artifact

Kilo-Org shipped open-source coding agent platform Kilo Code v7.8.1 (includes 7.8.0) on 2026-09-25. 7.8.0 brings a high-resolution streamed Agent Manager browser for public HTTPS pages and CDN assets in localhost previews, with install/retry/settings guidance, native cross-origin checks, ordered clipboard, and stalled-session cleanup; plus close-task commands and a stoppable session-cleanup pass. 7.8.1 publishes CycloneDX SBOMs for every CLI archive, npm package, container image, VS Code extension, and JetBrains plugin—SHA-256 bound and GitHub-attestation signed. Azure Entra ID accepts resource name or full endpoint URL.

Key Takeaways

Shipped: v7.8.1 / @kilocode/[email protected]
7.8.0: Agent Manager browser for public HTTPS/CDN; close-task cmds; stoppable session cleanup
7.8.1: CycloneDX SBOM + SHA-256 + GitHub attestation on every artifact
Azure Entra ID: resource name or full endpoint; block nested var refs in project MCP headers
Install: VS Code Marketplace / CLI / JetBrains; docs at kilo.ai/docs

Read full story

Linked Models & Agents:

🤖 coding-agent 🤖 Agent-Manager 🌐 Kilo 🌐 Kilo-Org 🌐 kilocode

#Kilo-Code#VS-Code#JetBrains#CLI#SBOM#CycloneDX#Agent-Manager#Browser preview#Entra-ID