On May 12, 2026 AWS announced full repository code review for AWS Security Agent—whole-codebase reasoning over trust boundaries and data flows plus file/line remediations, preview at no additional charge for existing Security Agent customers.
GitHub Actions OIDC role sessions are short-lived by design—teams still paste static access keys into workflow logs until scanners or audits catch the diff; supply-chain writeups keep repeating the pattern into 2026.
Build tooling has shifted from JavaScript-based (Webpack, Babel) to native-speed Rust and Zig runtimes (SWC, Rolldown, Bun). The CI/CD implications are real: 10× faster builds, smaller caches, and lower build minute costs on AWS CodeBuild and GitHub Actions.
CodePipeline costs a few dollars a month. GitHub Actions costs more at scale than most teams expect. Jenkins is free until you count the team running it. Integration, cost, scalability, and team fit across the three CI/CD options most AWS teams actually choose between.
