Tag

#coding-agents

Tagged “coding-agents”

8 articles

The command your agent approved is not the command that ran

A Docker write-up walks through CVE-2026-22708, a Cursor flaw where shell built-ins slipped past the agent's allowlist and quietly rewrote the environment, turning an approved git branch into arbitrary code execution. Docker's answer is to sandbox the whole agent, which shrinks the blast radius without closing every hole.

Aug 18, 2026 · Tomás Vega Security & supply chain

Docker returns to its coding-agent series with an argument shaped like a CI problem: no layer between the agent and the host

The second entry in Docker's Coding Agent Horror Stories, published on July 20, argues that a coding agent runs under the developer's filesystem permissions and credentials with nothing isolating it from the host by default. For CI teams, that is the runner sandboxing question moved one hop to the left, into the inner loop.

Jul 29, 2026 · Maya Okonkwo Security & supply chain

FakeGit floods GitHub with malicious repos aimed at coding agents

Island researchers say a campaign called FakeGit spun up about 7,600 malicious GitHub repositories, many posing as AI skills or MCP servers, to hand SmartLoader and StealC to developers and to the agents fetching capabilities on their behalf.

Jul 24, 2026 · Maya Okonkwo Platform engineering

GitHub's MCP Server tracks the stateless MCP spec, and the Redis session drops out

Ahead of a 28 July 2026 move to a stateless MCP core, GitHub says its MCP Server has been updated to run without per-session Redis state. For teams wiring coding agents into CI, that changes what the server has to remember between calls.

Jul 24, 2026 · Maya Okonkwo Developer experience

CircleCI's CLI is now a Go rewrite with an MCP server bolted on

CircleCI announced a ground-up Go rewrite of its CLI on July 7, shipped as 1.0 beta with predictable JSON on every command, a browser OAuth login, a debugging TUI and a built-in MCP server for Claude, Cursor and VS Code. It is a small announcement with an outsized effect on anyone who has watched a coding agent flail through unstructured CLI output.

Jul 23, 2026 · Priya Nair Security & supply chain

xAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys

Three days after a researcher demonstrated the Grok Build CLI silently uploading SSH keys and repository contents to xAI's cloud, xAI dropped the agent's full source on GitHub under Apache 2.0. The code is now inspectable. The trust model is a different question.

Jul 21, 2026 · Tomás Vega Security & supply chain

GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

Researchers at Google-owned Wiz disclosed GhostApproval, a class of flaw across six AI coding tools in which symbolic links redirect the agent's file writes while the human approval prompt shows the pre-resolution path. The mechanism is thirty years old; the CI/CD lesson is newer.

Jul 10, 2026 · Tomás Vega Platform engineering

GitHub streams Copilot agent sessions to the SIEM, in preview

GitHub put Copilot agent session streaming into public preview on July 2, exposing prompts, responses and tool calls from cloud agents and IDE clients to enterprise event collectors. For CI-adjacent workflows it turns Copilot from a black box into something an on-call can reconstruct after the fact.

Jul 7, 2026 · Maya Okonkwo