logoalt Hacker News

vultouryesterday at 3:31 PM2 repliesview on HN

The first linked PR (#1218) has only one commit co-authored by Copilot and it's not related to the vulnerability, and neither are the other suggestions in the PR. Am I missing something?


Replies

croemeryesterday at 5:33 PM

You're correct. The issue was introduced in this commit by a human not by copilot: https://github.com/snowflakedb/snowflake-connector-net/pull/...

However, GitHub Advanced Security, a bot, flagged something but not the real issue. So maybe that bot contributed a false sense of security.

Commit: https://github.com/snowflakedb/snowflake-connector-net/pull/...

galnagliyesterday at 3:49 PM

Github is having some problems -- will check! thanks a lot!

show 1 reply