GitLost: How AI Agents Leak Private Repos & What Secure CI/CD Looks Like in 2026
GitLost (535 HN points) demonstrated a terrifying attack: trick GitHub's AI agent into leaking private repository contents. This analysis breaks down the exploit methodology, why current permission models fail, and the new security architecture enterprises are adopting.