ChatGPT MCP Developer Mode Opens a Shadow AI Governance Gap
OpenAI's ChatGPT Developer Mode adds full MCP read/write access, letting paid users connect internal tools that IT may not see, audit or revoke.
DevOps is the set of practices, tools, and cultural habits that connect writing software with running it reliably. It covers continuous integration and delivery pipelines, infrastructure as code, observability, release automation, and the shared responsibility between developers and operations teams for what reaches production. Its goal is simple to state and hard to achieve: ship changes quickly without sacrificing stability, security, or accountability.
The discipline is being reshaped by AI. Coding assistants and autonomous agents now write, review, and deploy code. That creates new questions about cost, oversight, and control. Teams are weighing how much automated review is worth paying for, how to keep agents in sandboxed environments, and whether to run models locally. Vendors are redesigning command-line tools and developer platforms with agents, not just humans, as the primary users.
Security pressure is rising alongside these changes. CI/CD systems have become prime targets for supply chain attacks, where a single compromised dependency or workflow component can spread across many organizations. Meanwhile, employees connecting AI tools to internal systems without approval are creating governance blind spots that traditional security programs may miss. In regulated industries such as financial services, compliance checks are increasingly built directly into the delivery pipeline rather than handled as an afterthought.
This hub tracks:
Coverage focuses on what these developments mean for the people building and operating software.
OpenAI's ChatGPT Developer Mode adds full MCP read/write access, letting paid users connect internal tools that IT may not see, audit or revoke.
OpenAI added MCP support to ChatGPT developer mode, letting paid users connect external servers and run write actions outside IT's view.
GitHub made Balanced the default Copilot code review effort on Sept 28, 2026 and added API requests, moving more PRs to a costlier higher-reasoning model.
Cloudflare launched cf, an open-beta, agent-focused CLI covering 3,000+ API operations, and will deprecate Wrangler with 18 months of migration support.
GitHub, Cloudflare, Chrome and Microsoft shipped agent sandboxes, local model routing and agent-first CLIs as code review becomes the main bottleneck.
Coverage shows DevOps maturing past hype, with AI coding tools, security flaws, and platform choices reshaping engineering practices.
Visual Studio Professional 2026 sells for $29.97 in recurring deals. It's a perpetual IDE license without the Azure credits, upgrade rights, or Copilot extras.
US banks and fintechs are building PCI, SOC 2 and SOX controls into CI/CD pipelines. AI-assisted coding raises output, but it also makes releases less stable.
Attackers hijacked Trivy's GitHub Action tags and releases in March 2026, stealing CI/CD secrets and spreading to npm, Checkmarx and LiteLLM.