Will Velida 🇺🇦

Kubernetes SIG-Security docs have been doing some work to refresh the OWASP Kubernetes Top 10, to help cluster operators and users have a clear idea of where to start with Kubernetes security. slightly delayed, we have our draft top 10 out now. Any feedback very welcome

owasp.org/www-project-...

Building a Health Data Chat Agent with Claude and the Microsoft Agent Framework Using the Microsoft Agent Framework, we can build agents that interact with our data via chat capabilities. In my personal project, I decided to create a Chat API that allows me to query my data via a...

Wrote up how I wired Claude into the Microsoft Agent Framework to build a chat agent for my health data side project. Function tools, AG-UI streaming, system prompt design, skipping Foundry entirely. Check it out: www.willvelida.com/posts/ms-age...

It's very basic, but this a chat built with Blazor, using an agent built with the Microsoft Agent Framework using Claude Sonnet 4.6 to interact with my data from Fitbit! Not a bad way to spend a bank holiday.

There will be a few blog posts coming out of this one!

In a coding session with Opus 4.6. I still have to handhold this thing.

If you think that AI is going to render software engineering obsolete, you're nuts. There's no way I'd let this thing loose in my side projects, let alone enterprise environments.

If you genuinely believed you were 18 months from building a superintelligence that could cure cancer, you probably wouldn't pivot the entire company to horny chatbots. But I'm just a person with priorities. Maybe the path to solving death really does go through AI girlfriends. I don't have an MBA.

Finally built myself a basic UI for my health data. Blazor .NET 10 FE using bUnit for tests:

Honestly if you’re sending a robot to run terraform destroy, that damage is on you. Humans can’t even run that thing without disastrous consequences. That’s what you get for running with scissors

Hackerbot-Claw Bot Exploits GitHub Actions CI/CD Flaw to Attack Microsoft and DataDog Hackerbot-claw, an autonomous AI bot, has launched a week-long campaign abusing GitHub Actions misconfigurations to hit CI/CD pipelines at Microsoft, DataDog.

The problem is bigger than prompts in GHA. Actions might now be the biggest attack vector for OSS. We just had major repos like Trivy get deleted because of workflows using the deadly pull_request_target event. gbhackers.com/hackerbot-cl...

A GitHub Issue Title Compromised 4,000 Developer Machines A prompt injection in a GitHub issue triggered a chain reaction that ended with 4,000 developers getting OpenClaw installed without consent. The attack composes well-understood vulnerabilities into so...

Another victory for the vibe-coders I guess 🦀🦀: grith.ai/blog/clineje...

Nothing like being sick on your birthday 🫠 At least I got this to keep me entertained 😊

I just completed the "Introduction to CodeQL" GitHub Skills hands-on exercise! 🎉

github.com/willvelida/s...

#GitHubSkills #OpenSource #GitHubLearn

GitHub - willvelida/skills-introduction-to-secret-scanning: GitHub Skills: Introduction to Secret Scanning GitHub Skills: Introduction to Secret Scanning. Contribute to willvelida/skills-introduction-to-secret-scanning development by creating an account on GitHub.

I just completed the "Introduction to Secret Scanning" GitHub Skills hands-on exercise! 🎉

github.com/willvelida/s...

#GitHubSkills #OpenSource #GitHubLearn

GitHub - willvelida/skills-secure-repository-supply-chain: Exercise: Secure your Repository Supply Chain Exercise: Secure your Repository Supply Chain. Contribute to willvelida/skills-secure-repository-supply-chain development by creating an account on GitHub.

I just completed the "Secure your Repository Supply Chain" GitHub Skills hands-on exercise! 🎉Never done one of these before. This was fun! github.com/willvelida/s...

#GitHubSkills #OpenSource #GitHubLearn

How to Call Azure Services from an AI Agent Using Entra Agent ID and the .NET Azure SDK Introduction: The Identity Problem with AI Agents AI agents are moving beyond simple prompt-and-response. They’re calling APIs, reading databases, writing to storage etc. Doing actions on real resourc...

New post! How to Call Azure Services from an AI Agent Using Entra Agent ID and the .NET Azure SDK. Walks through blueprints, federated identity credentials, the autonomous agent token flow, tool calling with the Agent Framework, and observability with App Insights: www.willvelida.com/posts/entra-...

Tiny Tool Town 🏘️ A delightful showcase for free, fun & open source tiny tools. Stupid-delightful software made with love.

Join us at TinyToolTown.com

Congratulations! Well deserved 😊

Bit of Dutch cuisine 😋

agent-identity-samples/entra-agent-id/create-agent-blueprint-and-identities at main · willvelida/agent-identity-samples Samples showcasing Agent Identity. Contribute to willvelida/agent-identity-samples development by creating an account on GitHub.

I've also created a little sample for this. Just launch the Dev Container and run azd up to see it in action: github.com/willvelida/a...

Creating Entra Agent ID Blueprints and Identities with PowerShell and .NET In Microsoft Entra Agent ID, we use agent identity blueprints to create agent identities and request tokens using those agent identities. These agent identities represent AI Agents within your tenant,...

Much longer blog post than I thought it would be, but I spent a bit of today playing around with agent blueprints and identities with Entra Agent ID, and have written up what I've learned here: www.willvelida.com/posts/entra-...

Sure, we miss out on what weddings teach us about B2B sales, but it's worth the peace

North Korea: Kim Jong-un’s daughter makes international debut fuelling succession speculation Kim Ju-ae’s arrival in Beijing ahead of China’s victory day military parade show she is her father’s preferred successor, experts say

To be fair, North Korea is on track to having a woman as leader faster than America is: share.google/obPF6pSCZQWf...

Since generative AI is based on scouring the large body of existing content for the most common patterns, relying on AI at work is a great way to be a drone who definitely doesn’t need a promotion or their own team or a project budget for their big interesting new idea they will never have

good engineering is good engineering. Know how to ship.

I've been rolling my eyes at this kind of stuff on LinkedIn.

Engineering quality still, and always will, matters

How to fully customize Windows Terminal with Oh My Posh (themes, fonts, icons, & more) YouTube video by Kayla Cinnamon

Finally decided to start a YouTube channel! Would greatly appreciate if you went and checked it out 🫶

First video: how to fully customize Windows Terminal with Oh My Posh (and more!)

Also let me know if you want to see any specific videos from me! 💖
youtu.be/VFnr0lwwGuQ?...

Microsoft Certified: Security, Compliance, and Identity Fundamentals

I know it's just a fundamentals cert, but I'm still happy that I've got it. Next one, GitHub Advanced Security cert! learn.microsoft.com/api/credenti...

Neat

Some photos of me having fun at @dddmelbourne.bsky.social, asking you all not to engage in vibe coding, but practice intentional, Hypervelocity Engineering instead 🙂