CI/CD via agent tools: Skills, CLIs, MCP, and more with Semaphore
DevOps and Docker Talk: Cloud Native Interviews and ToolingShow Notes
What does an AI-native CI look like? The Semaphore team joins me to talk about their focus on making your agent harness the gateway to testing, fixing, and deploying your code. Video podcast version here: https://youtu.be/HzXAdtVrW70
★Show Links★ Semaphore https://semaphore.io/ Semaphore open source https://github.com/semaphoreio/semaphore SLSA Security Checklist https://slsa.dev/
Creators & Guests
Marcos Filipe - Guest
Cristi Cotovan - Editor
Bret Fisher - Host
Beth Fisher - Producer
Marko Gaćeša - Guest
(00:00) - Introduction
(00:29) - AI Native CI Vision
(04:54) - Bret's Update
(09:03) - Semaphore AI Journey
(22:39) - Open Source Platform Shift
(37:28) - Plugins CLI MCP Skills
(43:11) - Work Until CI Is Green
(45:42) - Test Boxes and Agentic CI Loop
(57:39) - Sandboxing and Least Privilege
(01:10:12) - Roadmap SLSA and Getting Started
★ Support this podcast ★
More from DevOps and Docker Talk: Cloud Native Interviews and Tooling
Control Plane CEO Doron Grinstein joins me to discuss how they’ve created an AI-native cloud API that virtualizes multi-cloud and hybrid cloud to simplify management and ship faster. Watch the video of this episode.
OpenChoreo is a “batteries included”, AI-native Kubernetes platform stack for Platform Engineers that combines GitOps, Observability, AI Agents, and Workflows into a custom K8s distribution “super pack” that is managed via Backstage, CLI, API, or MCP. Check out the video podcast version here: https://youtu.be/AqGWjxEfj2g
Michael Irwin of Docker joins me to run through Gordon AI improvements, Docker Hardened Images and what's now free, Docker Sandboxes for running agents in proper isolation, Model Runner updates including MLX support on Mac, MCP Toolkit dynamic discovery, and the newly renamed Docker Agent with its GitHub Action for automating PR reviews and docs checks. Check out the video podcast version here: https://youtu.be/dTF3b36Bq6w
Bret is joined by the founders of Plakar - Julien Mangeard and Gilles Chehade - to nerd out over backup engineering. The kind where you're building your own file formats and cryptographic layers, not just wiring up cron jobs. We get into how Plakar deduplicates and encrypts at the source so your cloud provider never sees your keys. Also, their snapshot model has no chain dependencies, which means you can delete any backup without breaking the others. We had a fun hour of backup horror stories, ransomware pragmatism, where I'm lobbying hard for a Docker volume integration. Check out the video podcast version here: https://youtu.be/OPRK5osKQHI
Container base images (like Official Docker Hub images) are often updated without new tag versions. I call this Silent Rebuilds. There's no way to know this happens without image digest-checking automation like Dependabot and Renovate with specific settings. Failure to keep up-to-date is a prime source of vulnerabilities that can lead to serious security breaches. Automate the updates! Check out the video podcast version here: https://youtu.be/z_ahbsSc4Fo