Coder on Changelog Master Feed

Well, I'm here with Nikki Pike from coder.com, secure environments where devs and agents work in parallel. Nikki, the thing on my mind this week is the laptop. How secure, how at risk are we? The laptop is the trap here. And not only because the fact that it could be stolen, you could lose it, it breaks, and you're out of work while you're waiting for a new one, but there's also just the consistency that you got there. We all know developers. Developers are gonna be looking for some of the latest and greatest. And if you're not really controlling how they get out there, that's where you get this. It works on my machine. It doesn't work on in production. It doesn't work anywhere else because you don't have that consistency. You don't have that ability to really standardize what that environment looks like. But there's also the security and the supply chain aspect of this. When you have local machines out there, look at, like, the Shai Halaad, you know, that virus that went out not long ago. This was a compromise of the NPM public repositories. They went and downloaded things. NPM did what it did. Next thing you know, you you're compromised. But when you use something like what we're doing with cloud development environments, then you can mandate and you can put restrictions on there to say, hey. You can only go get your packages from our private repo. Those packages are expected to have been thoroughly vetted. We know that they're clean. Now does this stop everything like Shay Hled? No. If that compromised package gets into your private repo, you can still have that, but it really reduces the surface area of the attack, and it also reduces the blast area of the compromise should it happen. Because if your laptop gets compromised and you have to kill the laptop for whatever reason, that's weeks out of work while you're either fixing that or you're getting a new laptop in. The cloud development environments allows you to kill that, start back up fresh, and you're back and running in five minutes. You don't have to wait all that time. Alright, friends. Go to coder.com. Give our developers room to build and run parallel agents inside secure self hosted environments. Again, coder.com.