The story’s score and claims

Comments on No. 95 of 155 · Formal · edition of Wednesday 28 October 2026

We let our cloud agents query prod (with OIDC, not secrets)

Summary

Formal, a security and access-control company, describes how it lets cloud coding agents such as Cursor and Devin query its production databases and cloud infrastructure using OIDC identity rather than long-lived secrets.

Comments

Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules