GitHub SSH Authorization with SAML SSO for Forked Repositories

November 16, 2025 Lothar Schulz 0

A troubleshooting story about an intriguing GitHub issue: a developer could clone a GitHub repository successfully, however failed to push updates to it.
I explain in detail the cause is GitHub’s permission model for forked repositories within organizations that enforce SAML SSO.
The solution is simple in hindsight: authorize your SSH key for use with SAML SSO for GitHub organizations that require that.

Kiro vs GitHub Copilot: Which AI Coding Assistant Wins for React Development?

July 28, 2025 Lothar Schulz 0

I tested Kiro’s structured, spec-driven development approach against GitHub Copilot’s rapid iteration style by building the same React quiz app with both tools. While Kiro excelled at upfront planning and task breakdown, its rigid methodology failed to produce working code. Copilot’s pragmatic approach with real-time feedback ultimately delivered a functional prototype. The key insight? Understanding when to use structured planning versus rapid prototyping can make or break your AI-assisted development workflow.

Let the Agents Vibe: Introducing Flow Coding

July 7, 2025 Lothar Schulz 0

Introducing “flow coding”—a new multi-agent development approach where you orchestrate AI agents to collaborate on software projects. Unlike vibe coding’s human-AI partnership, flow coding enables AI-to-AI collaboration while you guide the creative process from above.

Claude 4’s 25% Syntax Error Reduction

May 26, 2025 Lothar Schulz 0

Claude 4’s release brings significant improvements to AI-assisted coding that matter for security-conscious engineers. The coding platform Lovable reports a 25% reduction in syntax errors and 40% speed improvement in production environments.
While this doesn’t directly address semantic security issues like dependency confusion attacks, fewer syntax errors allow security reviewers to focus on logic and security issues rather than basic correctness, creating opportunities for more targeted security review.

Slopsquatting

April 24, 2025 Lothar Schulz 0

An AI-driven threat software engineers need to watch out for — when large language models hallucinate fake but plausible package names, and bad actors register them for malicious use. As AI-generated code becomes more common, verifying package names is no longer optional. Learn what slopsquatting is, why it matters, and how to protect your code.

Cracking the GitHub Code: A Heartfelt Saga of SSH Keys, SSO, and Cloning Victories

February 29, 2024 Lothar Schulz 0

Join me on a journey through the labyrinth of GitHub repositories, where a seemingly simple task – cloning a repository – turned into a quest for knowledge. In this tale, I’ll share my experience of encountering an error message, navigating SSH keys, discovering the ‘Configure SSO’ dropdown, and ultimately finding the solution. So, grab your SSH key and let’s dive into the world of GitHub authentication for use with SAML single sign-on!