In 2026, there were a series of reports where coding agents running in CI environments like GitHub Actions leaked secrets or executed unintended commands triggered by the content of issues or PRs. The ...