Unmold publishes Terraform from any CI, Teleport kills the DB VPN

Unmold.dev provides a lightweight private registry that lets you ship Terraform or OpenTofu modules straight from a PR or CI pipeline, bypassing repo setup and strict SemVer rules. It stores immutable artifacts in cloud storage and integrates with GitHub Actions, GitLab, Jenkins, and more, letting teams iterate fast.

By replacing the VPN tunnel with Teleport’s certificate‑based access, engineers can connect directly to databases without a shared service account. Every query is signed with the user’s identity, so audit logs now show exactly who ran each statement, simplifying compliance and incident response.

SkillsGuard adds a pre‑commit hook that scans AI agent skill packages for suspicious patterns, decoding obfuscation and applying 100+ rules. By halting malicious SKILL.md files before they merge, it protects pipelines from hidden reverse shells and other payloads.