Skip to content

NewPublic vulnerability findings and merged fixes across open-source repositories.Our open-source security work.See the research

Guides

Long-form how-tos.

Step-by-step walkthroughs for getting more out of Sebastion AI. Installation, custom rules, CI wiring, prompt-injection defence.

Research · 7 min read
Finding path traversal in MCP servers
How NVIDIA's RAG Blueprint MCP server read arbitrary files, and the validation pattern that fixed it.
How-to · 9 min read
Managing GitHub agents safely
Wiring autonomous agents into your repos without handing them the keys.
Architecture · 11 min read
CI/CD trust architecture in 2026
Where supply-chain trust breaks in modern pipelines, and how to design around it.