Overview
- Wiz Research's Red Agent discovered and exploited the GitHub Actions flaw on June 23, 2026 by posting a crafted issue that caused a workflow to execute commands and return a Jira API token tied to qa@snowflake.net.
- Snowflake patched the vulnerable jira_issue.yml workflow the same day, rotated the exposed Jira token on June 24, and says audit logs attribute access during the five-day exposure window solely to Wiz's authorized testing.
- The bug stemmed from unsafe interpolation of attacker-controlled issue title and body directly into a run: shell block plus a faulty gate that checked github.event.pull_request.user.login even for issue events, letting any user trigger the job.
- Commit history shows a June 18 refactor merged in PR #1218 that lists GitHub Copilot Autofix as a co-author, but multiple analyses say Copilot's exact authorship of the vulnerable lines is disputed.
- Security teams should treat this as a warning to use environment variables and structured parsing (for example, jq), enforce CI/CD linting and human review for AI-generated commits, and adopt short-lived credentials because autonomous agents can shorten discovery windows and change response needs.