Securing tomorrow’s git forge, so we can reimagine everything else | Entire's Thomas Dohmke & Apiiro's Idan Plotnik
Dev Interrupted
September 22, 2026
Before anyone reimagines the software lifecycle for agents, someone has to secure the place all that code lands.
Speakers Andrew, Thomas Dohmke, Idan Plotnik
TopicsTechnology
Andrew (0:02)
Welcome back to Dev Interrupted, brought to you by LinearB.
My guests today are Thomas Dohmke, the CEO of Entire, and Idan Plotnik, the co-founder and CEO of Apiiro. Today we're talking about the new GitForge, and which required to make it successful. It's born from the ashes of how we ship software before agents. Now writing code is cheap, and the cost has moved downstream into review queues, security backlogs, and pull requests that sit with nobody to chase them. And the messy critical artifacts that agents make along the way, well, they need a safe and secure home too.
Entire is rebuilding the GitForge, so your agent sessions logs live alongside your code. And Apiro injects security context into the prompt before an agent writes a line. That's because the Software Factory of Tomorrow relies on context being available just in time, and just where it's needed. So learn how to ship like engineers in the future in this interview with Thomas and Idan.
I'm really stoked because today on Dev Interrupted, we're talking about something that you can't deny, a transformation that's happening within the SDLC. And frankly, we talk about it constantly here on the show. I won't shut up about it. And if you're a frequent listener, then you know how much one of the things I opine about is the modern GitForge and the way that software is shipped and secured and understood and just the way that our software is consumed. And honestly, building something faster and safer are two goals that you can't compromise in today's market. And we've given quite a bit of attention to the mechanisms and mindsets that allow teams to change into this new way of working around both shipping and a GitForge, and also having hardened real-time defenses as you build software. So needless to say, I'm stoked for today's chat because joining us today are two titans of the industry on exactly these topics. Yes, we have a Dev Interrupted science fiction double feature in store for you today. In one corner, we have Thomas Dohmke, the CEO of Entire, the GitForge of the future, which I've brought up a number of times on our show here. As the former CEO of GitHub, Dohmke has a unique vantage on where this technology needs to go to meet the challenges of modern agentic development as a team sport. Joining him is Idan Plotnik, the CEO and co-founder of Apiiro. Idan's team is at the forefront of agentic AppSec, having recently shipped their own Guardian agent alongside a full software supply chain control center to enforce proactive cybersecurity for dev teams and their agents. So Thomas and Idan, welcome to Dev Interrupted.
Thomas Dohmke (2:53)
Hey, thanks for having us.
Idan Plotnik (2:55)
Thank you very much. What an opening.
And I would just say that there is no such thing as DLC anymore. It's ADLC, agentic development life cycle. Everything is agentic across I think any company in the world.
Andrew (3:09)
So absolutely. And now we're going to be talking about how you change that S into an A and why every other acronym that we're working with these days is getting changed and morphed by all of this technology. And I want to start by maybe throwing this first question at you, Thomas, about some of the writings that you had about the technology in the industry and how it's moving from engineering as a craft to a more assembly line model. And I'm wondering, where do you think the industry sits right now in this transformation in time?
Thomas Dohmke (3:41)
I think it's still very early days. And what it feels like forever ago that SharedGP launched and we started playing with GPT-3 and then GPT-4, I believe we're still very early in this transformation. And we're all trying to figure it out quite literally by prompting agents, seeing them run. Sometimes they're getting overconfident and let it run for hours or even days on end. And then it's Monday and we scratch our heads of what it actually produced and how much took and got rested. I think it's early days, especially in software development and coding, the world has changed dramatically in multiple phases. We went from auto-completion in 2021 to chat in 2023, and then clearly 2025 was the year of agents with Cloud Code and Codex, and Curse and of course, Copilot agent. And now we're in the middle of 2026, and we have all these agents writing all the code.
And now we're asking ourselves the question, how do we review all this? Or do we even review all this? How do we ship this with confidence? And maybe we need to slow down a little bit here and there as well.
44 more minutes of transcript below
Thousands of transcripts fetched by people building searchable podcast archives
Fetch the whole transcript
The demo key returns a sample episode in full, no card needed:
curl -H "x-api-key: pt_demo" \
https://spoken.md/transcripts/1000651996090Markdown with the speakers named, for your notes, your knowledge base, or anything that makes HTTP calls.
From $0.10 per transcript. No subscription. Credits never expire. Prices exclude VAT, added at checkout for EU customers. Not what you expected? Email us within 14 days with 20 or fewer credits used and we refund the pack in full.
Using your own key:
curl -H "x-api-key: YOUR_KEY" \
https://spoken.md/transcripts/1000791087656