GitHub Actions + Rust's Miri can leak your CI secrets; GPT-6 Astra helped find it
charliermarsh · x · 2026-09-22
Predrag Gruevski disclosed that running Rust's Miri in CI can leak secrets stored in GitHub Actions. Affected users should upgrade to the 2026-09-22 nightly, clear caches, and rotate any secrets the cargo miri CI job had access to. GPT-6 Astra reportedly helped find the issue.
More from Safety
- AI Fear Report tracks 1,815 AI bills, finds deepfake fear tops the regulatory index — beffjezos · 2026-09-22
- 670,000 agent skills, no trust layer: bot scan finds 69% never reliably fire — markjeffrey · 2026-09-22
- Insider: Frontier Model Forum is herding cats, lacks consensus to publish anything — evijit · 2026-09-22
- OpenAI's AGI plan: build an automated AI researcher, then iterate on alignment with it — trevposts · 2026-09-22
- US government lists first dedicated voice AI vendor under FedRAMP 20x — Prestigious_Bet2215 · 2026-09-22
- Doe v. GitHub AI case sees a meaningful ruling on Copilot output claims — technollama · 2026-09-22