Tag
YAML
Every YAML story we've curated in Bowl of Data, newest issue first — part of our weekly digest across AI, security, blockchain, and engineering.
Week 43 · 2026
Read the issue →-
The distroless security gap: Why bottom-up containers are the next evolution in OCI images
The article explores the 'distroless security gap' where minimizing container size inadvertently breaks vulnerability scanning by removing package metadata. It proposes a shift toward bottom-up, declarative container assembly to achieve both minimal attack surfaces and full security auditability.
Week 29 · 2026
Read the issue →-
GPUHedge: Hedging serverless GPU providers improves cold start p95 latency from 117s to 30s
gpuhedge is a specialized router that mitigates the high latency of serverless GPU cold starts by simultaneously managing requests across different providers. By using intelligent policies to switch from a primary to a backup provider, it significantly improves tail latency while actually reducing total compute expenditure.
Week 28 · 2026
Read the issue →-
GitLost: a public GitHub issue can steer an org's Agentic Workflow into leaking private repo contents, and a one-word prefix ("Additionally") bypassed the threat-detection guardrail
Noma Labs has uncovered 'GitLost', a vulnerability in GitHub Agentic Workflows that enables indirect prompt injection. By posting malicious instructions in a public issue, an attacker can trick the AI agent into leaking sensitive data from private organizational repositories.
Free weekly digest
Get next Saturday’s issue in your inbox
The week’s most relevant AI, security, blockchain, and engineering stories — curated, summarised, and reviewed by humans. No spam, unsubscribe anytime.
Subscribe — it’s free