Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
Novee Security showed that a GitHub issue from an account with no repository privileges could execute code on the CI runners behind Anthropic's and Google's coding-agent repositories, and hijack the next agent run on OpenAI's, using each vendor's default...