惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

S
SegmentFault 最新的问题
爱范儿
爱范儿
博客园 - Franky
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
WordPress大学
WordPress大学
宝玉的分享
宝玉的分享
雷峰网
雷峰网
酷 壳 – CoolShell
酷 壳 – CoolShell
IT之家
IT之家
有赞技术团队
有赞技术团队
美团技术团队
Last Week in AI
Last Week in AI
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
大猫的无限游戏
大猫的无限游戏
The Cloudflare Blog
Jina AI
Jina AI
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
Engineering at Meta
Engineering at Meta
T
Tailwind CSS Blog
J
Java Code Geeks
Martin Fowler
Martin Fowler
I
InfoQ
小众软件
小众软件
MongoDB | Blog
MongoDB | Blog

Help Net Security

FIDO Alliance wants to keep AI agents from going rogue on online payments Police arrest 10 suspected members of Black Axe cybercrime gang ShinyHunters claims it stole 1.4 million records from Udemy Sevii unveils Cyber Swarm Defense Mode to stop AI-driven attacks at scale Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research Cequence Agent Personas bring granular control and governance to enterprise AI agents NowSecure MARI gives enterprises evidence-based visibility into third-party mobile app risk The metrics killing your SOC, and what to use instead US state privacy fines reached $3.425 billion in 2025 Canada’s first SMS blaster case leads to three arrests Linux storage management tool Stratis 3.9.0 adds online encryption and cache-less pool startup TLS Connect gives SMBs a right-sized automated tool to manage TLS certificates Aptori expands its platform with autonomous offensive testing to reduce security bottlenecks Your IAM was built for humans, AI agents don’t care The AI criminal mastermind is already hiring on gig platforms 25 open-source cybersecurity tools that don’t care about your budget Product showcase: LuLu reveals unauthorized outbound connections from Mac apps Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach Users advised to drop passwords and make room for passkeys - Help Net Security Indirect prompt injection is taking hold in the wild - Help Net Security Compromised everyday devices power Chinese cyber espionage operations - Help Net Security New Cisco firewall malware can only be killed by pulling the plug - Help Net Security Meta is overhauling how you sign in, manage settings, and protect your accounts - Help Net Security Ubuntu 26.04 LTS delivers memory-safe system tools and live patching for Arm servers - Help Net Security OpenAI’s GPT-5.5 is out with expanded cybersecurity safeguards - Help Net Security AI is speeding up nation-state cyber programs - Help Net Security A study of 1,000 Android apps finds a privacy policy logging gap - Help Net Security IT spending to hit $6.31 trillion record, thanks to AI - Help Net Security With AI's help, North Korean hackers stumbled into a near-undetectable attack - Help Net Security Hacker with a special interest in breaching sports institutions ends behind bars - Help Net Security
Where AI in CI/CD is working for engineering teams - Help...
Anamarija Po · 2026-04-24 · via Help Net Security

Developers have folded AI into daily coding work. Still, the same tools remain largely absent from the systems that validate and ship software. New research from JetBrains points to a widening gap between how engineers write code on their own machines and what runs inside continuous integration and delivery pipelines.

AI in CI/CD

Daily coding use climbs past 90%

Workplace use of AI among developers exceeds 90%. The figure comes from three JetBrains studies: the AI Pulse survey from January 2026, the State of Developer Ecosystem report from October 2025, and the State of CI/CD Tools report from the same month.

Most of that activity sits upstream from the pipeline. Developers use AI to generate code, refactor existing logic, explore unfamiliar APIs, and work through debugging sessions. The tools also help with documentation, code comprehension in large codebases, and early-stage security checks. These tasks share a common property: fast local feedback, low cost of error, and the ability to discard a suggestion with no lasting consequence.

CI/CD adoption tells a different story

Inside CI/CD pipelines, the picture changes. Seventy-three percent of organizations do not use AI in their pipelines at all, according to the State of CI/CD Tools survey. Among those that have held back, 60% cite unclear use cases or value, 36% cite a lack of trust in AI-generated results, and 33% cite data privacy concerns.

The AI Pulse survey puts the number higher still, with 78.2% of respondents reporting no use of AI inside CI/CD workflows.

The issue is less about technical integration and more about whether AI can deliver predictable, measurable value inside a system designed around reproducible signals. Pipelines exist to confirm that code compiles, tests pass, and deployments can be rolled back safely. Non-deterministic outputs sit uneasily alongside that purpose.

Three use cases gain traction

Where AI has entered the pipeline, it tends to cluster around three tasks.

Failure diagnosis is the most common entry point. AI processes pipeline logs, identifies recurring patterns, and correlates errors across runs to narrow down likely root causes. Engineers keep control over what gets fixed. In one current setup, the TeamCity CLI works with Claude Code to analyze failing builds and surface probable causes to engineers.

Security workflows represent a second area. AI layers on top of existing scanning tools to interpret findings, suggest fixes, and in some cases generate patches. Those patches still move through standard testing and review before merging.

Test optimization is the third. By analyzing historical test runs and recent code changes, AI prioritizes relevant tests, flags flaky behavior, and cuts redundant execution. Teams often retain periodic full test runs to catch anything that slips through a reduced set.

Four stages of AI maturity in pipelines

Teams tend to expand AI use in delivery systems through a predictable progression. The first stage is no AI in the pipeline at all, which covers the majority of organizations. The second involves AI-assisted understanding, where the system explains failures and logs to engineers who make every decision.

The third stage introduces AI-generated proposals such as pull requests, configuration changes, and test updates, with humans reviewing each one. The fourth stage permits agentic workflows in which AI can trigger actions directly inside the pipeline, subject to explicit permissions, full logging, and human approval for anything significant.

Most teams sit in the first two stages. Movement between stages depends on the reliability of validation, policy controls, and pipeline signals around the AI system.

Pressure shifts to the delivery system

CI/CD functions as an evidence system. Every build, test, and deployment step produces signals that answer whether a change is safe to release. AI raises both the volume and variability of changes entering that system, which puts pressure on three areas: the reliability of pipeline results, the controls governing how changes progress through approvals and audit trails, and the ability of CI/CD platforms to expose pipelines and logs to external tools, including AI agents.

Flaky tests, inconsistent builds, and unclear feedback loops become more visible and more costly once AI-generated changes arrive in higher numbers. Access controls, policy checks, and approval gates move to the center of pipeline design.

Governance questions remain open

Several questions across the industry remain unresolved. Governance mechanisms that scale alongside more capable AI agents are still being worked out. The form of meaningful human oversight when a pipeline processes hundreds of AI-generated changes per day has no settled answer. The point at which CI/CD evidence itself may require auditing by AI systems has yet to be defined.

These questions will drive how CI/CD platforms evolve over the next several years, as AI participation in software delivery moves from assistance in the editor to direct involvement in the systems that decide what ships.

Webinar: The IT Leader’s Guide to AI Governance