AI & ML

A semicolon in a Codex branch name leaked its GitHub token. Scope decided the damage

A branch name with a semicolon in it was enough to pull a GitHub OAuth token out of OpenAI's Codex, according to a DevOps.com write-up of a critical…