# co-created Published articles for co-created. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Co-Create: Building GitLab with our users DevFeed: [Co-Create: Building GitLab with our users]() Original publisher: [Read original article]() Author: Isa Huerga Published: 2026-09-10T00:00:00Z Content type: article Language: en Sources: [GitLab]() Topics: [GitLab](), [CI/CD](), [Scala](), [Claude](), [Application Security](), [Cloud APIs]() Tags: [api](), [ci-cd](), [co-created](), [community](), [contributors](), [duo](), [engineering](), [open-source](), [rest-api](), [scala](), [security]() ### AI overview GitLab users collaborated through the Co-Create program on product improvements delivered in the first half of 2026, including API extensions, CI/CD capabilities, Scala support for AI-powered code understanding, security controls, and integration flexibility. ### Source excerpt GitLab users bring firsthand experience of the workflows they want to improve. Through our Co-Create program, they collaborate directly with us to design, build, and deliver product improvements that benefit more teams. In the first half of 2026, our users helped us extend APIs, add CI/CD capabilities, expand language support for AI-powered code understanding, strengthen security controls, increase the flexibility of integrations, and make GitLab easier to use and understand. Co-Create gives customers a direct path from a real-world challenge to a product improvement. Customers collaborate with us on the problem and solution, and help deliver the change. Unlike a feedback-only model, this puts real workflow context into the product development process. It creates a shorter path from need to value while helping us validate improvements in real conditions and extend their benefits to more GitLab users. "Over ten years ago, we set out to build code.siemens.com, our internal coding platform based on GitLab, which today serves close to 100,000 people. We've run and scaled the platform with a tiny team, guided by a 'for developers, from developers' philosophy. We co-created hundreds of features such as x509/gpg signed commits, protected container/packages, and project and social features such as follow users, allowing us to strengthen the security and collaboration culture at the scale of Siemens." -- Roger Meier, Distinguished Engineer, Siemens From a specific need to a shared improvement Some of the best product improvements start with a specific, real-world need. GitLab contributors helped us address the following needs: Making Scala codebases understandable to Orbit and GitLab Duo Giving security administrators a way to enforce Secret Push Protection across an entire instance Letting high-throughput teams configure merge train pipeline limits Showing the platforms supported by multi-architecture images Providing screen reader users with more context on documentation pa ## Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira DevFeed: [Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira]() Original publisher: [Read original article]() Author: Jack Ryan Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [AI-assisted coding](), [cursor]() Tags: [agentic](), [ai](), [ai-agent](), [application-security](), [atlassian](), [autonomous](), [awareness](), [blog](), [ci-cd](), [claude-code](), [cli](), [co-created](), [cursor](), [customer](), [customer-featured](), [developer](), [devops](), [devsecops](), [enablement](), [integration](), [interest](), [mcp](), [mcp-server](), [pull-request](), [scm](), [security](), [snyk-platform](), [snyk-security-intel](), [vulnerabilities]() ### AI overview Snyk and Atlassian describe an integration that turns Jira vulnerability tickets into AI-assisted remediation workflows. An agentic development environment retrieves ticket context, generates a fix in a local repository, validates it with a Snyk scan, and can open a pull request. ### Source excerpt Bridge the gap to autonomous fixes. Snyk and Atlassian integrate to transform Jira security tickets into precision fixes using Snyk Studio AI, eliminating context switching and resolving vulnerabilities in minutes. ## Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard DevFeed: [Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-03-17T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Agent Skills](), [Security](), [AI Agent](), [Application Security](), [snyk-learn]() Tags: [agent-skills](), [ai](), [ai-agent](), [americas](), [application-security](), [awareness](), [blog](), [co-created](), [developer](), [github](), [interest](), [javascript](), [node-js](), [open-source-security](), [prompt-injection](), [python](), [scm](), [secrets](), [security](), [security-labs](), [snyk-learn](), [snyk-open-source](), [supply-chain-security](), [tech](), [tools](), [vulnerabilities]() ### AI overview Snyk and Tessl have partnered to add security scanning and Snyk security scores to every public skill in the Tessl Registry. The article explains why agent skills require a distinct security approach, highlighting prompt injection, malicious code, excessive agency, and risks involving private data and external communication. ### Source excerpt Snyk and Tessl have partnered to bring security scanning to every skill in the Tessl Registry. Every public skill now carries a Snyk security score, bringing the same trust signals developers expect from package managers to the agent skills ecosystem. ## Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chain DevFeed: [Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chain]() Original publisher: [Read original article]() Author: Randall Degges Published: 2026-02-17T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [AI Bots](), [dev-tools](), [Developer Tools]() Tags: [agent-skill](), [ai](), [api](), [awareness](), [blog](), [cli](), [co-created](), [developer](), [interest](), [partnership](), [related-content](), [security](), [skills](), [supply-chain](), [supply-chain-security](), [tech](), [vercel]() ### AI overview Snyk and Vercel are integrating security analysis into the skills.sh marketplace to scan AI-agent skills before installation. The article explains why agent skills create a distinct software supply-chain trust risk because agents may interpret instructions and execute actions with access to developer environments. ### Source excerpt Snyk has partnered with Vercel to secure the skills.sh ecosystem, integrating real-time security scanning to detect malicious payloads and prompt injections before they reach your machine. Discover how this partnership is locking down the future of agentic AI. ## Secure by Default: Why Snyk and Augment Code are the New Standard for AI Development DevFeed: [Secure by Default: Why Snyk and Augment Code are the New Standard for AI Development]() Original publisher: [Read original article]() Author: Lindsay Kitendaugh Published: 2026-01-07T05:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [AI Development](), [Security](), [supply-chain-security](), [Vulnerabilities](), [Software Engineering](), [Code]() Tags: [ai](), [ai-agents](), [ai-coding](), [ai-development](), [americas](), [awareness](), [blog](), [co-created](), [code-security](), [developer](), [devops](), [devsecops](), [engineering](), [interest](), [pmm](), [real-time](), [scale](), [security](), [snyk-code](), [snyk-security-intel](), [software-development](), [supply-chain](), [supply-chain-security](), [tech](), [vulnerabilities]() ### AI overview Snyk and Augment Code announce a partnership that embeds Snyk's security intelligence into Augment's AI-powered development workflow. The integration provides real-time code scanning, agent-led vulnerability remediation, and policy-based governance for AI-generated code. ### Source excerpt Snyk and Augment Code have partnered to deliver real-time security scanning and autonomous remediation directly within AI-powered development workflows, allowing teams to maintain peak velocity while ensuring every line of code is secure by default and compliant with organizational policies. ## Accelerating innovation with AWS: Snyk selected as an AWS Pattern Partner DevFeed: [Accelerating innovation with AWS: Snyk selected as an AWS Pattern Partner]() Original publisher: [Read original article]() Author: Sarah Conway Published: 2025-12-03T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Amazon Web Services](), [AI Strategy](), [Security](), [Architecture & Design](), [Artificial Intelligence]() Tags: [ai](), [ai-ml](), [amazon](), [awareness](), [aws](), [blog](), [co-created](), [executive](), [generative-ai](), [partner](), [responsible-ai](), [security](), [snyk](), [snyk-platform]() ### AI overview Snyk joins AWS as a launch partner in the invite-only AWS Pattern Partners program, contributing experience with AI/ML and Generative/Agentic AI through the Snyk AI Trust platform. The program develops repeatable, scalable patterns with validated architecture, controls, and delivery practices to help enterprises modernize processes and adopt AI safely. Snyk is co-developing the Snyk Studio pattern to address disconnected data and workflows, enterprise-scale governance, AI-generated security risks, and evolving regulatory and compliance requirements. ### Source excerpt Snyk joins the AWS Pattern Partners program, bringing its proven success with AI/ML and Generative AI. Discover how Snyk Studio accelerates innovation on AWS, embeds security at inception, and delivers measurable outcomes for enterprises modernizing critical processes and adopting AI safely. ## Snyk and Cognition partner to enhance security for AI-native development DevFeed: [Snyk and Cognition partner to enhance security for AI-native development]() Original publisher: [Read original article]() Author: Sarah Conway Published: 2025-10-15T12:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [dev-tools](), [AI Bots]() Tags: [ai](), [ai-agents](), [ai-coding](), [awareness](), [blog](), [co-created](), [code-security](), [executive](), [real-time](), [related-content](), [security](), [security-for-ai](), [snyk-platform](), [vulnerabilities]() ### AI overview Snyk announces integrations with Cognition's Devin and Windsurf that embed Snyk Studio security intelligence into AI-native development workflows. The integrations provide real-time scanning and enable agent-led remediation of identified security issues. ### Source excerpt Enhance AI-native development security with Snyk & Cognition. Discover Snyk for Devin & Windsurf, embedding real-time security intelligence for faster, safer coding. ## Snyk Supercharges API Discovery with New Akamai Integration DevFeed: [Snyk Supercharges API Discovery with New Akamai Integration]() Original publisher: [Read original article]() Author: Nuno Loureiro Published: 2025-08-06T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [API](), [Application Security](), [snyk-platform](), [Security](), [OpenAPI Specification]() Tags: [2025](), [akamai](), [analysis](), [api](), [api-discovery](), [api-security](), [api-testing](), [apis](), [application-security](), [awareness](), [blog](), [co-created](), [efficiency](), [executive](), [integration](), [openapi](), [openapi-specification](), [platform](), [scanner](), [snyk](), [snyk-platform](), [testing](), [web]() ### AI overview Snyk and Akamai announced an integration that automates API discovery and schema ingestion. Akamai API inventories and schemas are added to Snyk API & Web so teams can turn discovered APIs into scannable targets with a single click, improving API security testing coverage and efficiency. ### Source excerpt Snyk and Akamai partner to streamline API security. This integration automates API discovery and schema ingestion from Akamai to power Snyk's DAST engine, boosting scan coverage and efficiency. ## Consolidate Security Findings with Snyk and Google Security Command Center DevFeed: [Consolidate Security Findings with Snyk and Google Security Command Center]() Original publisher: [Read original article]() Author: Daniel Berman; David Schott Published: 2025-02-06T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Google](), [Security & compliance, Cloud security](), [Application Security](), [Google Cloud Platform (GCP)](), [Security](), [vulnerability](), [sdlc](), [Kubernetes]() Tags: [application-security](), [blog](), [cloud-infrastructure](), [cloud-native](), [cloud-security](), [co-created](), [code](), [community](), [executive](), [google](), [google-cdm](), [google-cloud](), [interest](), [kubernetes](), [sdlc](), [security](), [security-vulnerabilities](), [snyk](), [vulnerabilities]() ### AI overview Snyk's integration with Google Cloud Security Command Center gives CISOs and security teams a unified view of application security vulnerabilities, misconfigurations, and cloud security issues. The integration helps organizations correlate findings, improve visibility across cloud infrastructure and application workloads, and prioritize remediation by risk severity, including vulnerabilities detected in code repositories, container images, and production workloads. ### Source excerpt Snyk's integration with Google Cloud Security Command Center (SCC) enables CISOs and security teams to monitor and manage AppSec vulnerabilities and misconfigurations from Snyk alongside cloud security issues from Google Cloud, all within a single pane of glass. ## Why ASPM is the future of AppSec: Key points from our newest whitepaper DevFeed: [Why ASPM is the future of AppSec: Key points from our newest whitepaper]() Original publisher: [Read original article]() Author: Sarah Conway Published: 2024-06-18T17:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Vulnerabilities]() Tags: [acquisition](), [application-security](), [aspm](), [blog](), [co-created](), [devops](), [enablement](), [executive](), [interest](), [megawatt](), [related-content](), [security](), [snyk-apprisk](), [vulnerabilities]() ### AI overview An overview of a Snyk and Accenture whitepaper argues that application security posture management can improve visibility, add business context, and help AppSec teams prioritize vulnerabilities. ### Source excerpt Read an overview of Snyk and Accenture's recent whitepaper: Why ASPM is the future of Application Security. ## 5 tips to supercharge app security from code to cloud DevFeed: [5 tips to supercharge app security from code to cloud]() Original publisher: [Read original article]() Author: Sonya Moisset Published: 2023-08-08T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security](), [DevSecOps](), [Vulnerabilities](), [Software Engineering](), [Development]() Tags: [americas](), [application-security](), [aspm](), [awareness](), [blog](), [cheat-sheet](), [co-created](), [compliance](), [developer](), [devops](), [devsecops](), [gitguardian](), [monitoring](), [regulatory](), [secrets](), [security](), [shift-left](), [snyk](), [snyk-platform](), [vulnerabilities]() ### AI overview This article presents a Snyk and GitGuardian cheat sheet for strengthening application security across the software development lifecycle, from code to cloud. It emphasizes secrets management, continuous monitoring of code and dependencies for vulnerabilities, proactive risk mitigation, compliance, developer ownership, and a shift-left security culture. ### Source excerpt As the partnership between Snyk and GitGuardian continues to grow, we've collaborated on a new cheat sheet that identifies key security considerations and tools that can help you mitigate risks and protect your code.