Istio AuthorizationPolicy Bypass: HTTP/2 Method-Case Bug
> Originally published on DevToolHub.
Istio AuthorizationPolicy rules that block or allow traffic by HTTP method just got a real asterisk. ISTIO-SECURITY-2026-007 fixes a case bug in that matcher. Published October 15, 2026, it covers one specific issue: an HTTP/2 request with a lowercased method name could slip past a method-based rule entirely. If you run DENY rules with methods, or ALLOW rules with notMethods, check this today. Don't wait for your next patch window.
What ISTIO-SECURITY-2026-007 Fixes in Istio AuthorizationPolicy
The advisory bundles five fixes. The loudest is a critical Envoy Brotli decompressor buffer overflow, CVE-2026-111497 (CVSS 9.2). Two Envoy crash bugs on CONNECT requests without a :path header (GHSA-8vc2-jrm4-835w, CVSS 7.5, and GHSA-47vj-9r25-wv5j, CVSS 6.5) and an ambient-mode istiod denial-of-service bug (GHSA-7p2q-4xvg-vxc6, CVSS 7.7, IP-addressed waypoints only) round it out.
The other is the one this piece covers: GHSA-w44g-8m76-8gc5, CVSS 7.4 (High). Istio titled it "AuthorizationPolicy method rules are bypassed over HTTP/2 by changing the method case."
There's no CVE number attached to this one yet. Only the GHSA ID exists, so don't expect it in a CVE search anytime soon. The affected range is 1.31.0–1.31.1, 1.30.0–1.30.5, and 1.29.0–1.29.8.
How the HTTP/2 Method-Case Bypass Works
An Istio AuthorizationPolicy can use a DENY rule with methods, or an ALLOW rule with notMethods. Both compile down to an Envoy :method matcher. That matcher is case-sensitive. So a rule meant to block POST only checks for the literal uppercase string POST.
Here's where the codecs diverge. Envoy's HTTP/1.1 codec normalizes and rejects non-uppercase methods before the request reaches the authorization filter. A lowercase post never even gets to test the policy. HTTP/2 doesn't enforce that same restriction at the codec layer. A request arriving as post instead of POST passes straight through the case-sensitive matcher. The policy that was supposed to block it does nothing.
That's the whole bug. One protocol enforces method casing before policy evaluation; the other doesn't. The policy logic assumed both would behave the same way. Policies that only use ALLOW rules with an explicit methods list aren't affected. The request still has to match an allowed value to get through. The negative-match cases — DENY + methods, ALLOW + notMethods — are different: there, a non-match means "let it through."
Why Istio AuthorizationPolicy Bypasses Keep Happening
This is at least the fifth time a matching-logic gap has let traffic slip past an Istio AuthorizationPolicy rule. Every time, the rule was supposed to catch it. Each one has been a different field. But the shape of the bug is the same: the policy compiler assumes a normalized value. Somewhere downstream, that assumption breaks.
- CVE-2020-16844 (ISTIO-SECURITY-2020-009, CVSS 6.8) — DENY rules with wildcard suffixes on source principals or namespaces never denied TCP callers.
- CVE-2021-39155 (ISTIO-SECURITY-2021-008) — the Host header comparison was case-sensitive, even though RFC 4343 says hostnames should compare case-insensitively. That gap let Httpbin.Foo bypass a rule written for httpbin.foo.
- CVE-2021-39156 (same ISTIO-SECURITY-2021-008 advisory) — a #fragment appended to a request path could bypass path-based authorization checks.
- CVE-2022-21679 (ISTIO-SECURITY-2022-001, CVSS 6.8) — mixing a 1.12 control plane with 1.11 data plane proxies broke hosts and notHosts matching.
None of these are the same code path. But they're all the same category: a string comparison in an AuthorizationPolicy field that quietly assumed normalized input. If you've treated method, host, or path matchers as airtight, this history says otherwise.
Who Is Affected: Versions and Deployment Modes
You're exposed if two things are both true. Your Istio AuthorizationPolicy rules use DENY with methods, or ALLOW with notMethods. And clients can reach the workload over HTTP/2.
That covers both sidecar mesh deployments and ambient mode. Both enforce L7 authorization through Envoy proxies that speak HTTP/2 to upstream services and to each other.
It doesn't matter whether the attacker is external or an already-compromised pod elsewhere in the cluster. The bypass works the same way either direction. That's exactly why relying on a single enforcement layer is risky. Our guide on Kubernetes node pools and networking is useful here too. It maps where traffic actually flows before you decide where policy should live.
Patched Versions and the Upgrade Path
Istio shipped fixes in 1.31.2, 1.30.6, and 1.29.9. The 1.29 branch's fix is also its final release. That line is done taking patches. Treat 1.29.9 as a stopgap, and plan your move to 1.30 or 1.31 regardless.
Roll the whole mesh, not just the control plane. The same release carries Envoy fixes, so restart your sidecars — or ztunnels and waypoints, on ambient — to pick up the patched proxy build, and don't stop at istiod.
How to Audit Your Istio AuthorizationPolicy Rules Right Now
You don't need to wait for a scanner to tell you if you're exposed. Pull every policy in the cluster and grep for the two fields that matter:
kubectl get authorizationpolicies.security.istio.io -A -o yaml | grep -B5 -E "methods:|notMethods:"
For each hit, check the action field on that policy. If it's DENY and lists methods, or it's ALLOW and lists notMethods, that rule relied on a case-sensitive match. HTTP/2 traffic could dodge it until you upgraded. If every method-based rule you find is an ALLOW with an explicit methods list, you were never affected. Patch anyway — the next matcher bug in this list might also hit a different field.
Mitigations If You Can't Upgrade Yet
The cleanest workaround doesn't need a code change to Istio at all. Rewrite DENY + methods rules as ALLOW rules with an explicit, uppercase methods list instead. Per the advisory itself, policies that only use ALLOW with an explicit methods list were never affected. A request still has to match a listed value to get through. There's no negative-match gap to exploit.
If you can't restructure the policy quickly, you can also restrict which workloads accept HTTP/2 from untrusted sources. That's a narrower fix than it sounds. gRPC and most modern service-to-service traffic run on HTTP/2 by default. Upgrading is still the actual fix; the policy rewrite is a bridge, not a replacement.
The Takeaway: Don't Rely on Istio AuthorizationPolicy Alone
Five bypasses across six years in the same subsystem is a pattern, not bad luck. That's a reasonable argument for not putting all your access control eggs in one AuthorizationPolicy basket. Layer a Kubernetes NetworkPolicy underneath your mesh's L7 rules. That way, a matcher bug at the application layer doesn't also mean the connection itself was never restricted.
Runtime visibility helps too. A tool like Falco can flag unexpected traffic at the kernel level, no matter what Envoy's policy layer missed. If you're studying for a Kubernetes security certification, our CKA vs CKAD vs CKS breakdown covers the access-control picture. It shows where authorization and network segmentation fit into the certification track.
For now: patch to 1.31.2, 1.30.6, or 1.29.9. Audit your existing Istio AuthorizationPolicy rules for DENY+methods or ALLOW+notMethods. And don't treat method-based policy as your only line of defense.
Frequently Asked Questions
Q: Does this bug have a CVE number?
A: Not as of this advisory's publication. It's tracked only under the GitHub Security Advisory ID GHSA-w44g-8m76-8gc5, CVSS 7.4 (High). A CVE may get assigned later, but don't rely on a CVE-only vulnerability feed catching it yet.
Q: Is my cluster affected if I only use ALLOW rules with an explicit methods list?
A: No. The advisory is specific: ALLOW rules with an explicit methods list were never affected. It still has to match a value in that list. The bug only hits the negative-match cases: DENY with methods, or ALLOW with notMethods.
Q: Does HTTP/1.1 traffic need the same audit?
A: No, not for this specific bug. Envoy's HTTP/1.1 codec rejects non-uppercase methods before the request reaches the authorization filter. So the case-mismatch bypass doesn't apply here. HTTP/2 is the exposed path.
Q: Are the other fixes in the same advisory related to this bypass?
A: No. ISTIO-SECURITY-2026-007 bundles five separate fixes: this method-case bypass (GHSA-w44g-8m76-8gc5), a critical Envoy Brotli overflow (CVE-2026-111497), two Envoy CONNECT crash bugs, and an ambient-mode istiod denial-of-service bug (GHSA-7p2q-4xvg-vxc6) that needs an IP-addressed waypoint. They're unrelated to each other, and patching to the fixed versions covers all of them.
Quick Summary:
- ISTIO-SECURITY-2026-007 (Oct 15, 2026) fixes GHSA-w44g-8m76-8gc5, CVSS 7.4 — no CVE assigned yet
- The bug: Istio AuthorizationPolicy's :method matcher is case-sensitive, so HTTP/2's lowercase methods slip past DENY/notMethods rules
- Affected: DENY rules with methods, or ALLOW rules with notMethods, on 1.31.0–1.31.1, 1.30.0–1.30.5, 1.29.0–1.29.8
- Not affected: ALLOW rules with an explicit methods list
- Patched in 1.31.2, 1.30.6, and 1.29.9 (1.29's final release — plan your move off that branch)
- Same advisory also fixes a critical Envoy Brotli overflow (CVE-2026-111497, CVSS 9.2) — the upgrade covers it
- This is the fifth AuthorizationPolicy matching bypass in Istio's history (CVE-2020-16844, CVE-2021-39155, CVE-2021-39156, CVE-2022-21679) — treat method/host/path matchers as a layer, not the whole wall, and back them with NetworkPolicy and runtime detection
The real fix is upgrading. But if this is the fifth time a string comparison inside Istio AuthorizationPolicy has let traffic through it shouldn't have, the bigger lesson is to stop treating that one policy object as your only gate.
1 reaction
Mentions
Istio AuthorizationPolicy Bypass: HTTP/2 Method-Case Bug > Originally published on DevToolHub. Istio AuthorizationPolicy rules that block or allow traffic by HTTP method just got a real asterisk. ISTIO-SECURITY-2026-007 fixes a case bug in that matcher. Published October 15, 2026, it covers one specific issue: an HTTP/2 request with a lowercased method name could slip past a method-based rule entirely. If you run DENY rules with methods, or ALLOW rules with notMethods, check this today. Don't wait for your next patch window. What ISTIO-SECURITY-2026-007 Fixes in Istio AuthorizationPolicy The advisory bundles five fixes. The loudest is a critical Envoy Brotli decompressor buffer overflow, CVE-2026-111497 (CVSS 9.2). Two Envoy crash bugs on CONNECT requests without a :path header (GHSA-8vc2-jrm4-835w, CVSS 7.5, and GHSA-47vj-9r25-wv5j, CVSS 6.5) and an ambient-mode istiod denial-of-service bug (GHSA-7p2q-4xvg-vxc6, CVSS 7.7, IP-addressed waypoints only) round it out. The other is the one this piece covers: GHSA-w44g-8m76-8gc5, CVSS 7.4 (High). Istio titled it "AuthorizationPolicy method rules are bypassed over HTTP/2 by changing the method case." There's no CVE number attached to this one yet. Only the GHSA ID exists, so don't expect it in a CVE search anytime soon. The affected range is 1.31.0–1.31.1, 1.30.0–1.30.5, and 1.29.0–1.29.8. How the HTTP/2 Method-Case Bypass Works An Istio AuthorizationPolicy can use a DENY rule with methods, or an ALLOW rule with notMethods. Both compile down to an Envoy :method matcher. That matcher is case-sensitive. So a rule meant to block POST only checks for the literal uppercase string POST. Here's where the codecs diverge. Envoy's HTTP/1.1 codec normalizes and rejects non-uppercase methods before the request reaches the authorization filter. A lowercase post never even gets to test the policy. HTTP/2 doesn't enforce that same restriction at the codec layer. A request arriving as post instead of POST passes straight through the case-sensitive matcher. The policy that was supposed to block it does nothing. That's the whole bug. One protocol enforces method casing before policy evaluation; the other doesn't. The policy logic assumed both would behave the same way. Policies that only use ALLOW rules with an explicit methods list aren't affected. The request still has to match an allowed value to get through. The negative-match cases — DENY + methods, ALLOW + notMethods — are different: there, a non-match means "let it through." Why Istio AuthorizationPolicy Bypasses Keep Happening This is at least the fifth time a matching-logic gap has let traffic slip past an Istio AuthorizationPolicy rule. Every time, the rule was supposed to catch it. Each one has been a different field. But the shape of the bug is the same: the policy compiler assumes a normalized value. Somewhere downstream, that assumption breaks. - CVE-2020-16844 (ISTIO-SECURITY-2020-009, CVSS 6.8) — DENY rules with wildcard suffixes on source principals or namespaces never denied TCP callers. - CVE-2021-39155 (ISTIO-SECURITY-2021-008) — the Host header comparison was case-sensitive, even though RFC 4343 says hostnames should compare case-insensitively. That gap let Httpbin.Foo bypass a rule written for httpbin.foo. - CVE-2021-39156 (same ISTIO-SECURITY-2021-008 advisory) — a #fragment appended to a request path could bypass path-based authorization checks. - CVE-2022-21679 (ISTIO-SECURITY-2022-001, CVSS 6.8) — mixing a 1.12 control plane with 1.11 data plane proxies broke hosts and notHosts matching. None of these are the same code path. But they're all the same category: a string comparison in an AuthorizationPolicy field that quietly assumed normalized input. If you've treated method, host, or path matchers as airtight, this history says otherwise. Who Is Affected: Versions and Deployment Modes You're exposed if two things are both true. Your Istio AuthorizationPolicy rules use DENY with methods, or ALLOW with notMethods. And clients can reach the workload over HTTP/2. That covers both sidecar mesh deployments and ambient mode. Both enforce L7 authorization through Envoy proxies that speak HTTP/2 to upstream services and to each other. It doesn't matter whether the attacker is external or an already-compromised pod elsewhere in the cluster. The bypass works the same way either direction. That's exactly why relying on a single enforcement layer is risky. Our guide on Kubernetes node pools and networking is useful here too. It maps where traffic actually flows before you decide where policy should live. Patched Versions and the Upgrade Path Istio shipped fixes in 1.31.2, 1.30.6, and 1.29.9. The 1.29 branch's fix is also its final release. That line is done taking patches. Treat 1.29.9 as a stopgap, and plan your move to 1.30 or 1.31 regardless. Roll the whole mesh, not just the control plane. The same release carries Envoy fixes, so restart your sidecars — or ztunnels and waypoints, on ambient — to pick up the patched proxy build, and don't stop at istiod. How to Audit Your Istio AuthorizationPolicy Rules Right Now You don't need to wait for a scanner to tell you if you're exposed. Pull every policy in the cluster and grep for the two fields that matter: kubectl get authorizationpolicies.security.istio.io -A -o yaml | grep -B5 -E "methods:|notMethods:" For each hit, check the action field on that policy. If it's DENY and lists methods, or it's ALLOW and lists notMethods, that rule relied on a case-sensitive match. HTTP/2 traffic could dodge it until you upgraded. If every method-based rule you find is an ALLOW with an explicit methods list, you were never affected. Patch anyway — the next matcher bug in this list might also hit a different field. Mitigations If You Can't Upgrade Yet The cleanest workaround doesn't need a code change to Istio at all. Rewrite DENY + methods rules as ALLOW rules with an explicit, uppercase methods list instead. Per the advisory itself, policies that only use ALLOW with an explicit methods list were never affected. A request still has to match a listed value to get through. There's no negative-match gap to exploit. If you can't restructure the policy quickly, you can also restrict which workloads accept HTTP/2 from untrusted sources. That's a narrower fix than it sounds. gRPC and most modern service-to-service traffic run on HTTP/2 by default. Upgrading is still the actual fix; the policy rewrite is a bridge, not a replacement. The Takeaway: Don't Rely on Istio AuthorizationPolicy Alone Five bypasses across six years in the same subsystem is a pattern, not bad luck. That's a reasonable argument for not putting all your access control eggs in one AuthorizationPolicy basket. Layer a Kubernetes NetworkPolicy underneath your mesh's L7 rules. That way, a matcher bug at the application layer doesn't also mean the connection itself was never restricted. Runtime visibility helps too. A tool like Falco can flag unexpected traffic at the kernel level, no matter what Envoy's policy layer missed. If you're studying for a Kubernetes security certification, our CKA vs CKAD vs CKS breakdown covers the access-control picture. It shows where authorization and network segmentation fit into the certification track. For now: patch to 1.31.2, 1.30.6, or 1.29.9. Audit your existing Istio AuthorizationPolicy rules for DENY+methods or ALLOW+notMethods. And don't treat method-based policy as your only line of defense. Frequently Asked Questions Q: Does this bug have a CVE number? A: Not as of this advisory's publication. It's tracked only under the GitHub Security Advisory ID GHSA-w44g-8m76-8gc5, CVSS 7.4 (High). A CVE may get assigned later, but don't rely on a CVE-only vulnerability feed catching it yet. Q: Is my cluster affected if I only use ALLOW rules with an explicit methods list? A: No. The advisory is specific: ALLOW rules with an explicit methods list were never affected. It still has to match a value in that list. The bug only hits the negative-match cases: DENY with methods, or ALLOW with notMethods. Q: Does HTTP/1.1 traffic need the same audit? A: No, not for this specific bug. Envoy's HTTP/1.1 codec rejects non-uppercase methods before the request reaches the authorization filter. So the case-mismatch bypass doesn't apply here. HTTP/2 is the exposed path. Q: Are the other fixes in the same advisory related to this bypass? A: No. ISTIO-SECURITY-2026-007 bundles five separate fixes: this method-case bypass (GHSA-w44g-8m76-8gc5), a critical Envoy Brotli overflow (CVE-2026-111497), two Envoy CONNECT crash bugs, and an ambient-mode istiod denial-of-service bug (GHSA-7p2q-4xvg-vxc6) that needs an IP-addressed waypoint. They're unrelated to each other, and patching to the fixed versions covers all of them. Quick Summary: - ISTIO-SECURITY-2026-007 (Oct 15, 2026) fixes GHSA-w44g-8m76-8gc5, CVSS 7.4 — no CVE assigned yet - The bug: Istio AuthorizationPolicy's :method matcher is case-sensitive, so HTTP/2's lowercase methods slip past DENY/notMethods rules - Affected: DENY rules with methods, or ALLOW rules with notMethods, on 1.31.0–1.31.1, 1.30.0–1.30.5, 1.29.0–1.29.8 - Not affected: ALLOW rules with an explicit methods list - Patched in 1.31.2, 1.30.6, and 1.29.9 (1.29's final release — plan your move off that branch) - Same advisory also fixes a critical Envoy Brotli overflow (CVE-2026-111497, CVSS 9.2) — the upgrade covers it - This is the fifth AuthorizationPolicy matching bypass in Istio's history (CVE-2020-16844, CVE-2021-39155, CVE-2021-39156, CVE-2022-21679) — treat method/host/path matchers as a layer, not the whole wall, and back them with NetworkPolicy and runtime detection The real fix is upgrading. But if this is the fifth time a string comparison inside Istio AuthorizationPolicy has let traffic through it shouldn't have, the bigger lesson is to stop treating that one policy object as your only gate.
service間の接続・認証・monitoringを、service codeの変更を抑えてまとめる。 Istioは既存のdistributed applicationに透過的に重ねるopen-source service mesh。load balancing、service-to-service authentication、monitoringなどを共通化します。 istio/istio
Today in DevOps: GitHub AI Scan for pull requests is now GA Today in DevOps: 1. AI Scan for pull requests generally available (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Multi-repo support and other improvements for GitHub Copilot in Slack and Microsoft Teams github.blog 4. Agentic autofix for code scanning alerts general availability (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [ar] جديد ديف أوبس (DevOps): إطلاق ميزة الفحص بالذكاء الاصطناعي لطلبات السحب (Pull Requests) في GitHub... في عالم DevOps اليوم: ١. أصبح فحص الذكاء الاصطناعي لطلبات السحب متاحًا للجميع (GitHub) github.blog ٢. hashicorp/vault الإصدار ٢.٢.٠ github.com/hashicorp/vault/releases/tag/v2.2.0 ٣. دعم المستودعات المتعددة وتحسينات أخرى لـ GitHub Copilot في Slack وMicrosoft Teams github.blog ٤. أصبح الإصلاح التلقائي الآلي لتنبيهات فحص التعليمات البرمجية متاحًا للجميع (جيت هاب) github.blog 5. nginx/nginx-gateway-fabric الإصدار 2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio الإصدار 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [bn] ডেভঅপস-এ আজকের আপডেট: গিটহাব এআই স্ক্যান ফর পুল রিকোয়েস্ট এখন সাধারণের জন্য উন্মুক্ত (GA) আজ ডেভঅপস-এ: ১. পুল রিকোয়েস্টের জন্য এআই স্ক্যান এখন সর্বসাধারণের জন্য উপলব্ধ (গিটহাব) github.blog ২. হ্যাশিকর্প/ভল্ট সংস্করণ ২.২.০ github.com/hashicorp/vault/releases/tag/v2.2.0 ৩. স্ল্যাক এবং মাইক্রোসফট টিমস-এ গিটহাব কপাইলটের জন্য মাল্টি-রেপো সাপোর্ট এবং অন্যান্য উন্নতি github.blog ৪. কোড স্ক্যানিং অ্যালার্টের জন্য এজেন্টিক অটোফিক্স এখন সর্বসাধারণের জন্য উপলব্ধ (গিটহাব) github.blog ৫. এনজিনএক্স/এনজিনএক্স-গেটওয়ে-ফ্যাব্রিক ভি২.৮.০ github.com/nginx/nginx-gateway-fabric/releases/ta… ৬. ইস্টিও/ইস্টিও ১.৩১.২ github.com/istio/istio/releases/tag/1.31.2 [de-DE] DevOps heute: GitHub AI Scan für Pull Requests jetzt allgemein verfügbar Heute in DevOps: 1. AI Scan für Pull Requests allgemein verfügbar (GitHub) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Unterstützung für mehrere Repositories und weitere Verbesserungen für GitHub Copilot in Slack und Microsoft Teams github.blog 4. Agentic Autofix für Code-Scanning-Warnungen allgemein verfügbar (GitHub) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [es-US] Hoy en DevOps: El análisis de IA de GitHub para pull requests ya está disponible de forma general... Hoy en DevOps: 1. Escaneo con IA para solicitudes de extracción ya disponible (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Compatibilidad con múltiples repositorios y otras mejoras para GitHub Copilot en Slack y Microsoft Teams github.blog 4. Corrección automática de Agentic para alertas de escaneo de código ya disponible (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [fr-FR] L'actu DevOps : l'analyse IA de GitHub pour les pull requests est désormais disponible Aujourd'hui dans le DevOps : 1. Analyse IA des demandes d'extraction disponible (GitHub) github.blog 2. HashiCorp/Vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Prise en charge multi-dépôts et autres améliorations pour GitHub Copilot dans Slack et Microsoft Teams github.blog 4. Correction automatique des alertes d'analyse de code disponible (GitHub) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [hi] डेवऑप्स (DevOps) में आज: GitHub का पुल रिक्वेस्ट्स के लिए AI स्कैन अब GA है आज के DevOps अपडेट: 1. पुल रिक्वेस्ट के लिए AI स्कैन अब उपलब्ध है (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Slack और Microsoft Teams में GitHub Copilot के लिए मल्टी-रेपो सपोर्ट और अन्य सुधार github.blog 4. कोड स्कैनिंग अलर्ट के लिए Agentic ऑटोफिक्स अब उपलब्ध है (गिटहब) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [id] Hari Ini dalam DevOps: Pemindaian AI GitHub untuk pull request kini sudah tersedia secara umum (GA) Hari Ini di DevOps: 1. Pemindaian AI untuk permintaan tarik tersedia secara umum (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Dukungan multi-repo dan peningkatan lainnya untuk GitHub Copilot di Slack dan Microsoft Teams github.blog 4. Perbaikan otomatis Agentic untuk peringatan pemindaian kode tersedia secara umum (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [it] Oggi nel DevOps: lo scanner AI di GitHub per le pull request è ora disponibile (GA) Oggi in DevOps: 1. Scansione AI per le pull request generalmente disponibile (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Supporto multi-repository e altri miglioramenti per GitHub Copilot in Slack e Microsoft Teams github.blog 4. Agentic autofix per gli avvisi di scansione del codice generalmente disponibile (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [iw] היום ב-DevOps: סריקת ה-AI של GitHub לבקשות משיכה (Pull Requests) זמינה כעת לכלל המשתמשים היום ב-DevOps: 1. סריקת בינה מלאכותית לבקשות משיכה זמינה באופן כללי (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. תמיכה במאגרים מרובים ושיפורים נוספים עבור GitHub Copilot ב-Slack וב-Microsoft Teams github.blog 4. זמינות כללית של Agentic להתראות סריקת קוד (github) github.blog 5. nginx/nginx-gateway-fabric גרסה 2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [ja] 今日のDevOps：GitHubのプルリクエスト向けAIスキャンが一般提供開始（GA） 本日のDevOps関連情報： 1. プルリクエストのAIスキャンが一般提供開始（GitHub） github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. SlackおよびMicrosoft TeamsにおけるGitHub Copilotのマルチリポジトリサポートおよびその他の改善 github.blog 4. コードスキャンアラートのエージェントによる自動修正が一般提供開始(GitHub) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [ko] 오늘의 데브옵스(DevOps): GitHub AI 풀 리퀘스트 스캔, 정식 출시(GA) 오늘 DevOps 소식: 1. 풀 리퀘스트 AI 스캔 기능 정식 출시 (GitHub) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Slack 및 Microsoft Teams용 GitHub Copilot에 멀티 리포지토리 지원 및 기타 개선 사항 추가 github.blog 4. 코드 스캔 알림에 대한 Agentic 자동 수정 기능 정식 출시 (깃허브) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [ml] ഇന്നത്തെ ഡെവ്ഓപ്സ്: ഗിറ്റ്ഹബ് എഐ സ്കാൻ ഫോർ പുൾ റിക്വസ്റ്റ് ഇപ്പോൾ ലഭ്യമാണ് (GA) ഇന്ന് DevOps-ൽ: 1. പൊതുവെ ലഭ്യമായ പുൾ അഭ്യർത്ഥനകൾക്കായുള്ള AI സ്കാൻ (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. സ്ലാക്കിലും മൈക്രോസോഫ്റ്റ് ടീമുകളിലും GitHub കോപൈലറ്റിനുള്ള മൾട്ടി-റെപ്പോ പിന്തുണയും മറ്റ് മെച്ചപ്പെടുത്തലുകളും github.blog 4. കോഡ് സ്കാനിംഗിനുള്ള ഏജന്റ് ഓട്ടോഫിക്സ് പൊതു ലഭ്യത അലേർട്ടുകൾ (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [nl-NL] DevOps vandaag: GitHub AI-scan voor pull requests nu algemeen beschikbaar Vandaag in DevOps: 1. AI-scan voor pull-requests algemeen beschikbaar (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Ondersteuning voor meerdere repositories en andere verbeteringen voor GitHub Copilot in Slack en Microsoft Teams github.blog 4. Agentic autofix voor code-scanwaarschuwingen algemeen beschikbaar (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [pa] ਅੱਜ ਡੇਵ-ਓਪਸ (DevOps) ਵਿੱਚ: GitHub AI ਸਕੈਨ ਹੁਣ ਪੁੱਲ ਰਿਕਵੈਸਟਾਂ ਲਈ ਆਮ ਤੌਰ 'ਤੇ ਉਪਲਬਧ (GA) ਹੈ ਅੱਜ DevOps ਵਿੱਚ: 1. ਪੁੱਲ ਬੇਨਤੀਆਂ ਲਈ AI ਸਕੈਨ ਆਮ ਤੌਰ 'ਤੇ ਉਪਲਬਧ ਹੈ (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. ਸਲੈਕ ਅਤੇ ਮਾਈਕ੍ਰੋਸਾਫਟ ਟੀਮਾਂ ਵਿੱਚ GitHub Copilot ਲਈ ਮਲਟੀ-ਰੇਪੋ ਸਹਾਇਤਾ ਅਤੇ ਹੋਰ ਸੁਧਾਰ github.blog 4. ਕੋਡ ਸਕੈਨਿੰਗ ਚੇਤਾਵਨੀਆਂ ਲਈ ਏਜੰਟਿਕ ਆਟੋਫਿਕਸ ਆਮ ਉਪਲਬਧਤਾ (github) github.blog 5. nginx/nginx-ਗੇਟਵੇ-ਫੈਬਰਿਕ v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [pl] Dzisiaj w DevOps: Skanowanie AI w GitHub dla pull requestów już dostępne Dzisiaj w DevOps: 1. Skanowanie AI dla żądań ściągnięcia jest ogólnie dostępne (GitHub) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Obsługa wielu repozytoriów i inne ulepszenia dla GitHub Copilot w Slacku i Microsoft Teams github.blog 4. Automatyczne poprawki agentów dla alertów skanowania kodu są ogólnie dostępne (github) github.blog 5. nginx/nginx-gateway-fabric w wersji 2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [pt-BR] Hoje no DevOps: Verificação por IA do GitHub para pull requests agora está disponível ao público ... Hoje em DevOps: 1. A função AI Scan para pull requests está disponível para o público em geral (GitHub) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Suporte a múltiplos repositórios e outras melhorias para o GitHub Copilot no Slack e no Microsoft Teams github.blog 4. Correção automática de agentes para alertas de verificação de código disponível para o público em geral (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [ru] Новости DevOps: AI-сканирование пулл-реквестов в GitHub теперь общедоступно Сегодня в DevOps: 1. AI Scan для запросов на слияние (github) стал общедоступным github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Поддержка нескольких репозиториев и другие улучшения для GitHub Copilot в Slack и Microsoft Teams github.blog 4. Agentic autofix для оповещений о сканировании кода стал общедоступным (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [ta] இன்றைய DevOps: GitHub AI ஸ்கேன், புல் ரெக்வெஸ்டுகளுக்கு (pull requests) பொது பயன்பாட்டிற்கு வந்து... இன்று DevOps-இல்: 1. புல் ரிக்வெஸ்ட்களுக்கான AI ஸ்கேன் பொதுவாகக் கிடைக்கிறது (கிட்ஹப்) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. ஸ்லாக் மற்றும் மைக்ரோசாஃப்ட் டீம்ஸில் உள்ள கிட்ஹப் கோபைலட்டிற்கான மல்டி-ரெப்போ ஆதரவு மற்றும் பிற மேம்பாடுகள் github.blog 4. கோட் ஸ்கேனிங் எச்சரிக்கைகளுக்கான ஏஜென்டிக் ஆட்டோஃபிக்ஸ் பொதுவாகக் கிடைக்கிறது (கிட்ஹப்) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [te] నేటి డెవలప్స్: గిట్హబ్ (GitHub) AI పుల్ రిక్వెస్ట్ స్కాన్ ఇప్పుడు అందుబాటులో ఉంది ఈరోజు DevOpsలో: 1. పుల్ రిక్వెస్ట్ల కోసం AI స్కాన్ సాధారణంగా అందుబాటులో ఉంది (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Slack మరియు Microsoft Teamsలో GitHub Copilot కోసం మల్టీ-రెపో మద్దతు మరియు ఇతర మెరుగుదలలు github.blog 4. కోడ్ స్కానింగ్ హెచ్చరికల కోసం ఏజెంటిక్ ఆటోఫిక్స్ సాధారణంగా అందుబాటులో ఉంది (github) github.blog 5. nginx/nginx-gateway-fabric v2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2 [uk] Сьогодні в DevOps: GitHub AI Scan для запитів на злиття (pull requests) тепер доступний для всіх ... Сьогодні в DevOps: 1. AI Scan для запитів на зміщення доступний для всіх (github) github.blog 2. hashicorp/vault v2.2.0 github.com/hashicorp/vault/releases/tag/v2.2.0 3. Підтримка кількох репозиторіїв та інші покращення для GitHub Copilot у Slack та Microsoft Teams github.blog 4. Загальна доступність Agentic autofix для сповіщень про сканування коду (github) github.blog 5. nginx/nginx-gateway-fabric версії 2.8.0 github.com/nginx/nginx-gateway-fabric/releases/ta… 6. istio/istio 1.31.2 github.com/istio/istio/releases/tag/1.31.2