Grok Accused of Uploading Repositories and Secrets

ctjlewis · x · 2026-07-15

Users pointed out that Grok's build process uploads the entire repository, including .git history and secrets, to a cloud bucket; even opting out fails to prevent this.

The post's author described the situation as severe as "stealing the .git directory," emphasizing it was only discovered because someone monitored the traffic using a network proxy. Commenters further elevated this to the necessity of open infrastructure: if a system verbally promotes "local-first" but secretly exfiltrates code and secrets, trust is completely broken.

Related event: Grok Build/CLI accused of silently uploading entire codebases; xAI promises to delete data(47 posts)→

Original post →

More from Infra

Infra channel →