ci-cd

Three 2026 reports describe secrets exposed by a CI coding agent, saved in Claude Code approval files in public repositories, and sought by an agentic framework on GitHub; the sources agree on rotation but differ in scope and evidence.

GitHub's November 2 changelog says Actions will block pull_request_target by default in public repositories from December 2, 2026, after brownouts on November 9 and 16, unless an event policy allows it.

GitHub says eligible Linux jobs may now run on AWS in addition to Azure, and warns that Azure-only IP allowlists or Entra Conditional Access policies can block the new runners.

GitHub's Xcode 27 runner image for Actions is now generally available on arm64 runners only; a separate runner-images notice plans to make OpenSSL 4 the default from November 2.

GitHub's October 14 changelog says Actions workflow dependency lockfiles are in public preview; the pre-1.0 gh actions-lock extension writes .github/workflows/actions.lock.

GitLab's October 12 critical patch release fixes CVE-2026-97229, rated CVSS 10.0, which GitLab says could let an unauthenticated user run code via a crafted CI/CD regular expression.

GitHub's Actions Runner Controller 0.15.0 for Kubernetes runner scale sets updates resources in place, uses patch requests, and adds configurable concurrency, listener rate limits and shutdown grace period.

GitHub says all newly minted App installation tokens are now stateless JWTs of about 520 characters; the opt-out header ends November 30, 2026.

GitHub will retire the macOS 14 runner image on November 2, 2026 and fail jobs using it in eight October brownout windows; Azure DevOps hosted agents follow the same schedule.

Socket found that actions-cool/issues-helper and actions-cool/maintain-one-comment, disabled since May 2026, became reachable again on September 16 with their malicious tags intact, silently re-running the payload.

The Rust Security Response Team disclosed and patched a Miri flaw that stored all environment variables in target/, letting cached CI output expose secrets to pull requests.

CNCF graduated Cloud Native Buildpacks on August 11, formalizing a build model that shifts base-image patching from Dockerfiles to a centralized builder.