Skip To Main Content
Roee Hershko on Muck Rack

Roee Hershko

As seen in: DEV Community
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Roee Hershko’s profile

Articles by Roee Hershko

Your AI agent has more permissions than your users

|
By Roee Hershko, Pushpendra Agrawal
| DEV Community
Here is a conversation that happens in a lot of companies right now: Dana: @assistant please close PAY-123 and delete the old release branch Assistant: Done ✅ The problem: Dana is not allowed to delete branches in that repository. The assistant is. Most AI agents and chat bots act in other systems (Jira, GitHub, Slack, Salesforce, AWS) through one service account. That account needs enough access to help everyone, so it ends up with more access than any single person who talks to it.
Open in Who Shared Issue with article?

Our CI pipelines went from 3 minutes to 15 after moving to Kubernetes. Here's how we fixed it.

|
By Roee Hershko
| DEV Community
We're a ~500 developer company with around 800 GitHub repositories. Our CI/CD pipelines work hard. Before Kubernetes, we had 20 dedicated machines running pipelines — not small ones either. They were fast. Developers pushed code, pipelines kicked off immediately, builds finished in a few minutes. Nobody thought about it. It just worked. Then we moved our CI agents to Kubernetes. The migration The move made sense on paper. We already had Karpenter running, so we had auto-scaling out of the box.
Open in Who Shared Issue with article?
Show More