AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira(wiz.io)
408 points by galnagli | 151 comments
Wiz blog post describing how its Red Agent autonomously exploited a GitHub Actions vulnerability introduced by a Copilot Autofix to access Snowflake's internal Jira.