Grok Build Reported for Uploading Entire Repositories
TheZachMueller · x · 2026-07-14
Reports indicate that xAI's Grok Build CLI uploads entire Git repositories—including private codebases and unmasked secrets—to a Google Cloud bucket.
Key findings:
- On a 12GB test repository, the tool uploaded about 5.1GB of data to the grok-code-session-traces bucket, while the actual coding task only required 192KB.
- It scrapes the entire repository in the working directory rather than just the files needed for the task.
- A hidden toggle disablecodebaseupload: true appeared a day later, but the previous "Improve the model" opt-out did not prevent the upload.
- xAI has yet to clarify the scope, retention period, and deletion methods for the data.
More from coding & agent
- Inspired by OpenAI's 10,000-agent run, dev open-sources a crowdsourced agent problem-solving platform — Benjaminsen · 2026-09-11
- Lucid: open-source Mac app keeps your laptop awake only while AI agents run — Pitiful_Hedgehog_600 · 2026-09-11
- banteg's snail project crowdsources AI agents to finish matching Snail Mail's 20 remaining functions — banteg · 2026-09-11
- Alex Townsend posts 200 open problems in numerical linear algebra for humans and AI agents — IgorCarron · 2026-09-11
- Kimi K2.8 Preview rolls out: near-K3 coding performance, 1M context for all tiers — teortaxesTex · 2026-09-11
- Looking for a classifier of software engineering task shapes to pick models per task — StewartalsopIII · 2026-09-11