Tenki’s startup program is live: up to $50K in credits and grants.Apply

Blog

Product updates, guides, and engineering notes from the Tenki team.

Announcement that GitHub Copilot code review now integrates with MCP servers
Hayssem Vazquez-Elsayed
Hayssem Vazquez-Elsayed

Copilot Code Review Now Pulls from MCP Servers

Code Review
5 min read
Security alert about Cordyceps exploit affecting over 300 repositories via pull_request_target
Eddie Wang
Eddie Wang

Cordyceps Exploits pull_request_target in 300+ Repos

Security
7 min read
Analysis arguing that AI coding agents and code reviewers should come from separate vendors
Hayssem Vazquez-Elsayed
Hayssem Vazquez-Elsayed

Your AI Coding Agent and Code Reviewer Shouldn't Be the Same Company

Code Review
5 min read
Analysis of GitHub dropping PAT authentication for agents and the growing importance of merge gates
Hayssem Vazquez-Elsayed
Hayssem Vazquez-Elsayed

GitHub Dropped PAT Auth for Agents. Your Merge Gate Just Got More Important.

AI Agents
6 min read
Alert that GitHub Copilot code review now consumes your Actions minutes quota
Eddie Wang
Eddie Wang

Copilot Code Review Now Eats Your Actions Minutes

Code Review
7 min read
Statistic showing 38% of GitHub Actions workflows are vulnerable to pwn request attacks
Eddie Wang
Eddie Wang

38% of Workflows Are Vulnerable to Pwn Requests

Security
8 min read
Security analysis of the Claude Code Action hijack incident and root cause breakdown
Hayssem Vazquez-Elsayed
Hayssem Vazquez-Elsayed

Claude Code Action Hijack: What Went Wrong

Security
9 min read
Illustration of prompt injection attacks targeting AI agents in GitHub Actions
Hayssem Vazquez-Elsayed
Hayssem Vazquez-Elsayed

AI Agent Prompt Injection in GitHub Actions

Security
11 min read
Analysis of GitHub Copilot sandboxes launch and continued need for merge gates
Hayssem Vazquez-Elsayed
Hayssem Vazquez-Elsayed

Copilot Sandboxes Are Live. Your Merge Gate Still Matters.

AI Agents
5 min read
Graphite acquired by Cursor - why independent code review matters more than ever for AI-driven teams
Hayssem Vazquez-Elsayed
Hayssem Vazquez-Elsayed

Graphite Is Now a Cursor Product: Why Independent Code Review Matters

Code Review
6 min read
Pricing comparison between Tenki and Graphite AI code review tools
Hayssem Vazquez-Elsayed
Hayssem Vazquez-Elsayed

Tenki vs Graphite: AI Code Review Pricing

Code Review
8 min read
Security alert about the Miasma worm scraping CI runner memory to extract secrets
Eddie Wang
Eddie Wang

Miasma Worm Scraped CI Runner Memory for Secrets

Security
10 min read
12345678910