Agentic DevOps : AI Engineering for Infrastructure

The OpenAI Hugging Face hack. The Anthropic testing failures. Listen to the security and ops experts, not lab researchers. I walk you through the production failures that allowed OpenAI’s models to access the internet, and what we can learn from the last few months on how to protect our systems and data. Let’s stop debating imaginary outcomes and start working through that security backlog in our infrastructure.

I agree with the labs needing to slow down, but not because I believe AI will do uncontrollable harm on humans, but because the labs clearly need better production security and ops teams and more advanced lab infrastructure that’s been properly hardened. They also need to become a production ops security innovator and share that knowledge far and wide.

Watch the video of this episode.

Check the benchmarks for Best Provider Text-to-Speech.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Articles★

• The Hugging Face Incident Is Not an AI Story - Marius Horatau
• From Frenzy to Freakout - Ciaran Martin & Professor Alan Woodward
• Stop Freaking Out and Start Fixing Things - SANS Institute
• Fragments: September 8th - Martin Fowler
• When AI can do more than we can check - Christian Catalini
• I'm sorry, you're not going to die from an AI-engineered supervirus - Claus Wilke
• This Week in Security - Zack Whittaker

★Other stuff★

• 'Big Short' investor Steve Eisman on AI: The companies are trying to manufacture a crisis - CNBC
• xkcd: Dependency - so much of our systems are this.
• xkcd: Python Environment - and also this.
• Defense Factory - OpenAI
• Investigating three real-world incidents in our cybersecurity evaluations - Anthropic
• Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident - Hugging Face
• My recommended podspec, with seccomp enabled - Bret Fisher

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Start

Luke Hinds, co-founder of nolabs Inc. and the nono project, joins me to dig into AI agent sandboxing with the nono CLI. It's been my go-to sandboxing tool for local agent use, but I know there are more features I should be using, like secure secrets injection and egress URL path control.

Watch the video of this episode.

Check the benchmarks for Best Provider Text-to-Speech.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★

• nono website
• nono repo on GitHub
• nolabs website
• OpenSSF SLSA

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Introduction

My friend Mike Rollins joins me for a chat about what it’s like leading a software engineering team that doesn’t read code anymore.

Click here to watch a video of this episode.

Check the benchmarks for Best Provider Text-to-Speech

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★

• https://github.com/rollinsio/delta-v-dev-container-boilerplate
• https://github.com/rollinsio/beyond-test-coverage (expand your testing strength)
• https://rollins.io/
• https://www.instagram.com/rollins.io

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - MAIN - Video Podcast

A deep dive into GitHub’s Agentic Workflows feature, with Don Syme of GitHub Next & Peli de Halleux of Microsoft Research. 

Check out the video podcast version here: https://youtu.be/zmM8VISTOwo

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★
https://githubnext.com/projects/agentic-workflows/
https://github.github.com/gh-aw/
https://githubnext.com/projects/continuous-ai/
https://github.com/githubnext/repo-assist-impact/blob/main/report.md
https://github.com/microsoft/apm

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - MAIN - Video Podcast

Bret’s joined by the Anyshift.io co-founders, Roxane Fischer and Stephane Jourdan to discuss how an always-on SRE agent can help you proactively find risks and avoid incidents.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

This edited version is from my live stream show Apr 9, 2026: https://www.youtube.com/live/-DHZwxXigYI?si=9JnQYp8UZG27Bp2X&t=232 

★Show Links★

• Anyshift website
• Annie CLI
• Blog post: Agentic Context Engineering in Production: How AI Agents Build Institutional Expertise

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Introduction

Sam Alba, co-founder of Mendral, joins the show to discuss their new AI agents that act as “junior devops engineers” against GitHub Actions, security, failed tests, and more.

Check out the video podcast version here: https://youtu.be/zHmE6VpWD7o

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★

• Mendral website

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Introduction

My friend Brian Christner (Docker Captain alum) and I go through our AI harnesses, agents, models, and what we’re playing with right now. OpenClaw, OpenCode, Claude Code, Copilot, and all of it.

Check out the video podcast version here: https://youtu.be/8AFE0kxaY2k

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★

Brian’s Newsletter

Agents & Claude Code Setup

• Awesome Claude Code Subagents
• Agency Agents
• Claude Code Course
• OpenClaw alternative

Brian’s OpenClaw Projects

• OpenClaw Security Checklist
• Garmin Connect Skill
• OpenClaw Security Dashboard Skill

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - Introduction

It’s been 6 months since the last episode, and it feels like everything has changed. Bret and Nirmal catch you up on the increasing pace of AI change, how it will likely affect DevOps engineers and platform builders, and what’s coming on the podcast.

Check out the video podcast version here: https://youtu.be/NkqAMAIW5ks

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

★Show Links★

• Agent Harness Skills https://agentskills.io
• Video of Gradel CEO "You can write code faster, can you deliver it faster?" https://www.youtube.com/watch?v=VOXNJ9_sHuM
• Is your team still hand-chiseling code? https://www.geocod.io/code-and-coordinates/2026-01-21-hand-chiseling-code/

Creators & Guests

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

• (00:00) - ADOP - Feb 26, 2026

Bret and Nirmal are joined by Laura Tacho, CTO at DX and long-time friend of the show, to discuss AI usage and success in teams adopting AI and Agents to generate code and perform tasks.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Check out the video podcast version here: https://www.youtube.com/watch?v=0G_TWLHkj7U

★Show Links★
AI Measurement Framework
DX Core 4 Framework
Applying the Core 4 Framework

Creators & Guests

• (00:00) - Teaser

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

In this episode, I walk though some of my favorite new AI tools and content.

😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.

Resources and Topics mentioned in this episode:

• My AI Skeptic Friends are All Nuts, blog post from fly.io by Thomas Ptacek
• From Toil to Triumph: Harnessing Agentic AI to Streamline Infrastructure as Code, KubeCon video by Jody Varney
• The Dark Side of Just Hooking Up AI Agents to GitHub, blog post by Simon Maple from AI Native Dev
• Warp 2.0
• Warp 2.0 walkthrough
• Container Use project
• Devstral release in May
• The latest Devstral release
• SWE Bench 

Creators & Guests

• (00:00) - Intro

You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses on Udemy.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com