Deprecated: The each() function is deprecated. This message will be suppressed on further calls in /home/zhenxiangba/zhenxiangba.com/public_html/phproxy-improved-master/index.php on line 456 GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos | Lobsters
If you're gonna give a non-deterministic system a PAT with access to private data … yeah :)
[ Octo STS type schemes are the safer way to do this if ${{ secrets.GITHUB_TOKEN }} isn't enough / you need cross-repo permissions, but github/roadmap#1271 sounds cool ]
I'm not sure this makes a ton of sense, as noted by a commenter on the PoC issue.
Their
agentic-issue-to-pr.lock.ymluses asecrets.GH_AW_GITHUB_MCP_SERVER_TOKEN, so, a GitHub Personal Access Token.If you're gonna give a non-deterministic system a PAT with access to private data … yeah :)
[ Octo STS type schemes are the safer way to do this if
${{ secrets.GITHUB_TOKEN }}isn't enough / you need cross-repo permissions, but github/roadmap#1271 sounds cool ]