{"podcast":{"title":"Ship It Weekly - DevOps, SRE, Platform and Cloud Engineering News","slug":"ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275","podcast_index_feed_id":7591275,"rss_url":"https://media.rss.com/ship-it-weekly/feed.xml","website_url":"https://www.shipitweekly.fm/","image_url":"https://media.rss.com/ship-it-weekly/20260103_010109_fc16278a46c7b2c61123ed668a34f79d.jpg","author":"Teller's Tech - DevOps, SRE and Cloud Podcast","episode_count":55,"summary":"Ship It Weekly is a short, practical recap of what actually matters in DevOps, SRE, cloud infrastructure, and platform engineering. Each episode, your host Brian Teller walks through the latest outages, releases, tools, and incident writeups, then translates them into “here’s what this means for your systems” instead of just reading headlines. Expect a couple of main stories with context, a quick hit of tools or releases worth bookmarking, and the occasional segment on on-call, burnout, or team culture. This isn’t a certification prep show or a lab walkthrough. It’s aimed at people who are already working in the space and want to stay sharp without scrolling status pages, cloud updates, and blogs all week. You’ll hear about things like cloud provider incidents, Kubernetes and platform trends, Terraform and infrastructure changes, and real postmortems that are actually worth your time. Most episodes are 15–30 minutes, so you can catch up on the way to work or between meetings. Every now and then there will be a “special” focused on a big outage or a specific theme, but the default format is simple: what happened, why it matters, and what you might want to do about it in your own en…","last_synced_at":"2026-07-19T00:20:39.423055+00:00","page_url":"https://stenobird.com/podcast/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275"},"episode":{"title":"Hackerbot-Claw Grows, Xygeni Tag Poisoning, GitHub Search HA, Windows SID Failures, and AI Skills Supply Chain","slug":"hackerbot-claw-grows-xygeni-tag-poisoning-github-search-ha-windows-sid-failures-and-ai-skills-supply-chain","published_at":"2026-03-27T05:05:25+00:00","page_url":"https://stenobird.com/podcast/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275/hackerbot-claw-grows-xygeni-tag-poisoning-github-search-ha-windows-sid-failures-and-ai-skills-supply-chain","show_page_url":"https://stenobird.com/podcast/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275","url":"https://rss.com/podcasts/ship-it-weekly/2665471","audio_url":"https://content.rss.com/episodes/356364/2665471/ship-it-weekly/2026_03_27_04_55_11_7a117890-6b2e-48da-8c23-9395ef5e1ec5.mp3","summary":"This episode of Ship It Weekly is about the places where convenience quietly turns into trust. Brian revisits the Trivy story by zooming out to the bigger hackerbot-claw GitHub Actions campaign, then gets into the Xygeni tag-poisoning compromise, GitHub’s search high availability rebuild for GitHub Enterprise Server, Windows Server 2025 surfacing duplicate SID problems in cloned images, and the agent-skills ecosystem replaying package supply chain history. Plus: a quick lightning round on GitHub pausing self-hosted runner minimum-version enforcement and March secret scanning updates. Links OpenSSF advisory on active GitHub Actions exploitation https://seclists.org/oss-sec/2026/q1/246 Xygeni action compromise via tag poisoning https://www.stepsecurity.io/blog/xygeni-action-compromised-c2-reverse-shell-backdoor-injected-via-tag-poisoning GitHub Enterprise Server search high availability rebuild https://github.blog/engineering/architecture-optimization/how-we-rebuilt-the-search-architecture-for-high-availability-in-github-enterprise-server/ Microsoft on duplicate SIDs and nongeneralized Windows Server 2025 images https://learn.microsoft.com/en-us/troubleshoot/exchange/administration/exchange-server-issues-on-incorrect-windows-server-image Socket on supply chain security for skills.sh https://socket.dev/blog/socket-brings-supply-chain-security-to-skills Snyk ToxicSkills research https://snyk.io/blog/toxicskills-malicious-ai-agent-skills-clawhub/ GitHub self-hosted runner minimum version enforcement paused https://github.blog/changelog/2026-03-13-self-hosted-runner-minimum-version-enforcement-paused/ GitHub secret scanning pattern updates, March 2026 https://github.blog/changelog/2026-03-10-secret-scanning-pattern-updates-march-2026/ More episodes and show notes at https://…","meta_description":"This episode of Ship It Weekly is about the places where convenience quietly turns into trust. Brian revisits the Trivy story by zooming out to the bigger…","key_points":[],"chapters":[],"topics":[],"duration_seconds":925,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275/episodes/hackerbot-claw-grows-xygeni-tag-poisoning-github-search-ha-windows-sid-failures-and-ai-skills-supply-chain/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/ship-it-weekly-devops-sre-platform-and-cloud-engineering-news-7591275/hackerbot-claw-grows-xygeni-tag-poisoning-github-search-ha-windows-sid-failures-and-ai-skills-supply-chain.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}