--- title: GitHub disputes Wiz’s claim that Copilot Autofix wrote a... description: Wiz Research claimed GitHub Copilot Autofix wrote a critical injection flaw in Snowflake's .NET connector CI workflow, which its own autonomous Red Agent then... canonical: https://daily.dev/posts/github-disputes-wiz-s-claim-that-copilot-autofix-wrote-a-snowflake-flaw-ybruxnh95 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GitHub disputes Wiz’s claim that Copilot Autofix wrote a Snowflake flaw | daily.dev og:description: Wiz Research claimed GitHub Copilot Autofix wrote a critical injection flaw in Snowflake's .NET connector CI workflow, which its own autonomous Red Agent then... og:url: https://daily.dev/posts/github-disputes-wiz-s-claim-that-copilot-autofix-wrote-a-snowflake-flaw-ybruxnh95 og:image: https://api.daily.dev/og/posts/yBRUXNh95.png og:image:alt: GitHub disputes Wiz’s claim that Copilot Autofix wrote a Snowflake flaw og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitHub disputes Wiz’s claim that Copilot Autofix wrote a Snowflake flaw **[The Next Web](https://daily.dev/sources/tnw)** · 6 min read · 1 upvotes · 0 comments ## Summary Wiz Research claimed GitHub Copilot Autofix wrote a critical injection flaw in Snowflake's .NET connector CI workflow, which its own autonomous Red Agent then found and exploited to pull a Jira token with broad read access. Within hours the claim unraveled: the vulnerable commit predated and was unrelated to Copilot's co-authored commit, a squash merge simply carried the co-author label along. GitHub says a human wrote the flawed code and Copilot Autofix never reviewed or contributed to it. Wiz walked back the framing, and The Register corrected its headline and story. What remains undisputed is that Red Agent autonomously found the shell-injection bug, wrote and debugged an exploit after hitting a syntax error, and extracted working credentials, all with no human involvement, in a flaw live for five days before Snowflake patched it on the same day it was reported. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Did GitHub Copilot Autofix actually write the vulnerable code in the Snowflake GitHub Actions flaw? No. GitHub's internal review found a human Snowflake engineer wrote the unsafe refactor in a commit dated August 25, 2025, a month before it was introduced. The 'Copilot Autofix' co-author credit came from squashing pull request commits together, which folded in an unrelated commit where Copilot had reviewed a different file and marked it clear, not the line that caused the vulnerability. _Sorting AI-hype claims from verified facts in security disputes is easier when tracking follow-up coverage on daily.dev._ ### How did Wiz's Red Agent exploit the Snowflake GitHub Actions vulnerability? Red Agent found a workflow that inserted an issue title directly into a shell script before sanitization ran, and a broken guard condition let any GitHub user trigger it. Its first exploit payload used a hash character that caused a syntax error; the agent read the error, diagnosed that a comment had swallowed a closing bracket, rewrote the payload, and got a working callback within seconds, all without human input. _Understanding how autonomous exploitation agents self-correct matters for anyone securing CI/CD workflows via daily.dev._ ### How long was the Snowflake GitHub Actions injection vulnerability exploitable before it was patched? The flaw was live for five days before Snowflake patched it. Wiz reported the vulnerability on June 23, 2026, and Snowflake patched the workflow, restored safe escaping, and rotated the exposed Jira token that same day, with the investigation finding no evidence of unauthorized access beyond Wiz's own testing. _Tracking real remediation timelines helps teams benchmark their own incident response against daily.dev._ ## Similar posts on daily.dev - [Microsoft Brings AI-Powered Vulnerability Remediation to Azure DevOps with Copilot Autofix](https://daily.dev/posts/microsoft-brings-ai-powered-vulnerability-remediation-to-azure-devops-with-copilot-autofix-hrji4wjnb) · InfoQ · 0 upvotes · 0 comments - ['GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows](https://daily.dev/posts/gitlost-flaw-leaks-private-data-from-github-s-agentic-workflows-jty8eoyaf) · Dark Reading · 0 upvotes · 0 comments - [Cybersecurity Researchers Uncover Flaw in Google AI Coding Tool](https://daily.dev/posts/cybersecurity-researchers-uncover-flaw-in-google-ai-coding-tool-38fhs0zr4) · DevOps.com · 1 upvotes · 0 comments - [RoguePilot: How a Passive Prompt Injection Led to GitHub Repository Takeovers](https://daily.dev/posts/roguepilot-how-a-passive-prompt-injection-led-to-github-repository-takeovers-lazy65ayk) · InfoSec Write-ups · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#ai-agents](https://daily.dev/tags/ai-agents), [#github-actions](https://daily.dev/tags/github-actions) [View this post on daily.dev](https://daily.dev/posts/github-disputes-wiz-s-claim-that-copilot-autofix-wrote-a-snowflake-flaw-ybruxnh95) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GitHub disputes Wiz’s claim that Copilot Autofix wrote a Snowflake flaw","url":"https://daily.dev/posts/github-disputes-wiz-s-claim-that-copilot-autofix-wrote-a-snowflake-flaw-ybruxnh95","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/github-disputes-wiz-s-claim-that-copilot-autofix-wrote-a-snowflake-flaw-ybruxnh95"},"datePublished":"2026-08-18T00:09:05.121Z","dateModified":"2026-09-14T07:30:40.574Z","description":"Wiz Research claimed GitHub Copilot Autofix wrote a critical injection flaw in Snowflake's .NET connector CI workflow, which its own autonomous Red Agent then...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9acaa4fa43539ae712858c81c2debf5e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9acaa4fa43539ae712858c81c2debf5e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Next Web","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Next Web","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tnw","url":"https://daily.dev/sources/tnw"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/github-disputes-wiz-s-claim-that-copilot-autofix-wrote-a-snowflake-flaw-ybruxnh95","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github,ai-agents,github-actions","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Next Web","item":"https://daily.dev/sources/tnw"},{"@type":"ListItem","position":3,"name":"GitHub disputes Wiz’s claim that Copilot Autofix wrote a Snowflake flaw"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/github-disputes-wiz-s-claim-that-copilot-autofix-wrote-a-snowflake-flaw-ybruxnh95#faq","mainEntity":[{"@type":"Question","name":"Did GitHub Copilot Autofix actually write the vulnerable code in the Snowflake GitHub Actions flaw?","acceptedAnswer":{"@type":"Answer","text":"No. GitHub's internal review found a human Snowflake engineer wrote the unsafe refactor in a commit dated August 25, 2025, a month before it was introduced. The 'Copilot Autofix' co-author credit came from squashing pull request commits together, which folded in an unrelated commit where Copilot had reviewed a different file and marked it clear, not the line that caused the vulnerability. Sorting AI-hype claims from verified facts in security disputes is easier when tracking follow-up coverage on daily.dev."}},{"@type":"Question","name":"How did Wiz's Red Agent exploit the Snowflake GitHub Actions vulnerability?","acceptedAnswer":{"@type":"Answer","text":"Red Agent found a workflow that inserted an issue title directly into a shell script before sanitization ran, and a broken guard condition let any GitHub user trigger it. Its first exploit payload used a hash character that caused a syntax error; the agent read the error, diagnosed that a comment had swallowed a closing bracket, rewrote the payload, and got a working callback within seconds, all without human input. Understanding how autonomous exploitation agents self-correct matters for anyone securing CI/CD workflows via daily.dev."}},{"@type":"Question","name":"How long was the Snowflake GitHub Actions injection vulnerability exploitable before it was patched?","acceptedAnswer":{"@type":"Answer","text":"The flaw was live for five days before Snowflake patched it. Wiz reported the vulnerability on June 23, 2026, and Snowflake patched the workflow, restored safe escaping, and rotated the exposed Jira token that same day, with the investigation finding no evidence of unauthorized access beyond Wiz's own testing. Tracking real remediation timelines helps teams benchmark their own incident response against daily.dev."}}]} ```