Loops, supply chain flaws, and decentralized web

Today's programming news is split between practical workflows and security nightmares. Claude Code loops promise more autonomous AI coding, while a CI/CD vulnerability named Cordyceps threatens open-source supply chains. Meanwhile, a new Markdown alternative and a peer-to-peer web protocol offer fresh takes on old problems.

Sources

AI coding workflows

The conversation around AI-assisted coding is shifting from one-shot prompts to iterative loops.

#01towardsdatascience.comJul 6

How to Create Powerful Loops in Claude Code

The article details how to structure AI agents in self-verifying loops, reducing human oversight for tasks like code generation. It's a practical guide for anyone using Claude Code or similar tools.

8 min readRead original

Supply chain security

A newly disclosed CI/CD flaw shows that the attack surface keeps expanding.

#02thenewstack.ioJul 6

Cordyceps flaw pattern is more proof CI/CD is part of the attack surface

Novee Security's Cordyceps pattern lets unauthenticated users hijack GitHub workflows across 654 repos, including Microsoft and Google. It's a stark reminder that CI/CD pipelines are now prime targets.

New tools and protocols

Two projects take different approaches to simplifying or decentralizing how we publish and read content.

#03qount25.devJul 6

a better, cleaner Markdown alternative.

Shrimple is a Go-based Markdown alternative that aims to be cleaner and more readable both as plain text and rendered HTML. Worth a look if you're tired of Markdown's quirks.

#04sneakerweb.orgJul 6

sneakerweb

Sneakerweb is a peer-to-peer protocol for offline-first web publishing via USB drives. It's a niche but interesting take on censorship-resistant content distribution.