A Semicolon in a Branch Name Was All It Took to Steal an AI Agent’s GitHub Token

T2Covered by 1 source · first reported by DevOps.com / Cloud Native Now at 30 Sept, 19:35 UTC

AI coding agents don’t just suggest code anymore. Tools like OpenAI’s Codex spin up a real container, clone a real repository, and authenticate with a real GitHub credential to get the job done — which means every agent your team wires up is also a new privileged identity, holding real access…

aiclouddev

Sources

• T2A Semicolon in a Branch Name Was All It Took to Steal an AI Agent’s GitHub TokenDevOps.com / Cloud Native Now30 Sept, 19:35