Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR

Published

2026-08-17 14:00

Collected

2026-08-29 00:49

---
id: 6769
title: "Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug"
published_at: "2026-08-17T14:00:00Z"
tags: ["github-actions", "ci-cd", "vulnerability", "ai-agents", "snowflake", "copilot", "wiz"]
phying_url: "https://phying.com/item/6769"
lang: en
---

# Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR

## Summary

Wiz Red Agent found a GitHub Actions injection in a Snowflake repo five days after a Copilot-reviewed PR introduced it, missed by GitHub's scanner; a stolen token hit internal Jira. Fixed same day.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-08-17T14:00:00Z
- **Original:** https://www.wiz.io/blog/red-agent-snowflake-copilot-cicd-bug
- **Phying News:** https://phying.com/item/6769