Black Duck provides new safety app to GitHub Market
The Black Duck Safety GitHub App permits static software safety testing (SAST) and software program composition evaluation (SCA) scans in GitHub repositories.
Scans are triggered routinely by code commits and pull requests, and outcomes are added as feedback to the pull request if points are detected. It additionally gives automated repair pull requests for susceptible dependencies, customizable coverage enforcement, and automatic SARIF report integration with GitHub Superior Safety Dashboards.
Preview of NuGet MCP Server now accessible
Final month, Microsoft introduced help for constructing MCP servers with .NET after which publishing them to NuGet. Now, the corporate is saying an official NuGet MCP Server to combine NuGet bundle info and administration instruments into AI growth workflows.
“Because the NuGet bundle ecosystem is all the time evolving, giant language fashions (LLMs) get out-of-date over time and there’s a want for one thing that assists them in getting info in realtime. The NuGet MCP server gives LLMs with details about new and up to date packages which have been printed after the fashions in addition to instruments to finish bundle administration duties,” Jeff Kluge, principal software program engineer at Microsoft, wrote in a weblog publish.
Confluent publicizes Streaming Brokers
Streaming Brokers is a brand new function in Confluent Cloud for Apache Flink that brings agentic AI into knowledge stream processing pipelines. It permits customers to construct, deploy, and orchestrate brokers that may act on real-time knowledge.
Key options embrace instrument calling through MCP, the power to hook up with fashions or databases utilizing Flink, and the power to counterpoint streaming knowledge with non-Kafka knowledge sources, like relational databases and REST APIs.
“Even your smartest AI brokers are flying blind in the event that they don’t have recent enterprise context,” stated Shaun Clowes, chief product officer at Confluent. “Streaming Brokers simplifies the messy work of integrating the instruments and knowledge that create actual intelligence, giving organizations a stable basis to deploy AI brokers that drive significant change throughout the enterprise.”
