

GitHub OIDC for Dependabot: What It Secures, What It Doesn't
Security
7 min readProduct updates, guides, and engineering notes from the Tenki team.


GitHub OIDC for Dependabot: What It Secures, What It Doesn't


GitHub PR Coverage Is Useful. Here's What It Can't Tell You.

CI Vendor Shutdowns Are a Pattern, Not a Fluke

GitHub Made Code Review a Metered Utility


Namespace Runs the Agent. Tenki Reviews What It Wrote.


GitHub Actions Runner Images in 2026: The Complete Selection Guide


GitHub Is Building the Full CI Stack. Keep Your Review Layer Independent.


GitHub Measures Copilot Adoption. Tenki Measures What Passes Review.

Copilot Token Billing Is Coming: What Enterprise Teams Need Now

Cut Your GitHub Actions Bill by 90% in 2026


Axios npm Supply Chain Attack: What CI/CD Teams Must Lock Down

GitHub Gets Agent PR Review Right, Not the Fix