Updates and recent posts about ForgeMT..

Posts
Description

Link

@devopslinks shared a link, 1 week, 1 day ago

FAUN.dev()

Chinese Vulnerability Database: CNVD vs CNNVD Analysis

Investigation profilesCNNVDandCNVDechoCVE. They reveal manual errors and poor machine-readability. China’s July 2021RMSVmandates 48-hour reporting and bans pre-patch disclosure. Mapping gaps exist. The databases published about1.4kentries ahead ofCVE, with lead times measured in months... read more

Link

@devopslinks shared a link, 1 week, 1 day ago

FAUN.dev()

Please stop externalizing your costs directly into my face

SourceHut spent20–100%of weekly time mitigating hyper‑aggressive LLM crawlers. That work caused dozens of short outages and delayed core projects. The crawlers ignorerobots.txt. They hit costly endpoints likegit blame. They scan full git logs and commits. They rotate randomUser‑Agentsand thousands o.. read more

Link

@devopslinks shared a link, 1 week, 1 day ago

FAUN.dev()

Building a Least-Privilege AI Agent Gateway for Infrastructure Automation with MCP, OPA, and Ephemeral Runners

Introduces anAI Agent Gateway. It mediates agent requests, validates intent, enforcespolicy-as-code, and isolates execution inephemeral runners. Agents discover tools viaMCP. They submitJSON-RPCcalls and receiveOPAdecisions. Jobs queue and run in short-lived namespaces. Each run carries plan hashes,.. read more

Link

@devopslinks shared a link, 1 week, 1 day ago

FAUN.dev()

The hunt for truly zero-CVE container images

Chainguard's Factory 2.0 andDriftlessAFrebuild images from source on upstream changes. They produce 2,000+ minimalzero‑CVEimages. Each image includes anSBOMand a cryptographicsignature. Docker'sDHIbuilds onDebianandAlpine. It mirrors Debian'sno‑DSAtriage intoVEX. It also suppresses real CVEs until D.. read more

Activity

@secuodsoft started using tool MySQL , 1 week, 3 days ago.

Activity

@secuodsoft started using tool Kubernetes , 1 week, 3 days ago.

Activity

@secuodsoft started using tool Jenkins , 1 week, 3 days ago.

Activity

@secuodsoft started using tool Docker , 1 week, 3 days ago.

Activity

@secuodsoft started using tool Python , 1 week, 3 days ago.

Activity

@secuodsoft started using tool PHP , 1 week, 3 days ago.

ForgeMT is an open-source, production-grade platform designed to solve the complexity of running GitHub Actions runners at scale. Instead of teams managing their own fragile and duplicated CI runner setups, ForgeMT centralizes orchestration into a single, multi-tenant system built for scalability, security, and cost efficiency.

The platform provisions ephemeral runners on both EC2 and Kubernetes (EKS) using Terraform and Terragrunt, ensuring workloads scale up instantly and tear down to zero when idle, reducing costs. It enforces strong tenant isolation with AWS IAM, OIDC integration, and network segmentation, giving each team a secure boundary without requiring separate infrastructure.

ForgeMT integrates seamlessly with GitHub via a GitHub App and webhook events, automatically spinning up the right type of runner when jobs start. It supports advanced autoscaling strategies with Karpenter, spot instance optimization, and observability through centralized logging and monitoring.

By removing operational overhead, ForgeMT helps organizations accelerate delivery, cut cloud costs, and meet security requirements — all while giving developers fast, ephemeral CI runners that just work.