GitHub's Agentic Workflows in the Crosshairs of GitLost

Noma Security has publicised GitLost, a technique to get GitHub Agentic Workflows to spill private repository data.

The exploit is aimed at organizations with both public and private GitHub repositories, and relies on prompt injection.

Specifically, it uses indirect prompt injection  where malicious instructions are injected into seemingly regular requests.

GitHub's Agentic Workflows introduce LLMs into GitHub Actions, which is how the exploit is enabled.

Inside the Claude Code CLI

On 31 March 2026, Anthropic's CLI tool Claude Code that lets you interact with Claude for software engineering tasks from the command line - edit files, search codebases, manage git workflows and more - had its src directory leaked revealing TypeScript code with UI written in React and Ink (React for interactive command-line applications). It uses the Bun runtime - a fast JavaScript, TypeScript and JSX toolkit.

Vercel

Vercel is a deployment technology that also exists as a GitHub app.

It's good for product teams that want to ship quickly without managing infrastructure.

Immutable Github Releases

Some software is distributed as immutable Github releases (this is for software supply chain security). One such example is Inno Setup.

Compiling C# in VS Code

For this you need the C# Dev Kit extension. It's Roslyn-powered. 

The code name Roslyn was first written publicly by engineer Eric Lippert (the code was originally hosted on Microsoft's CodePlex before being moved to GitHub).

Where Winforms lives on Github

This is where Winforms lives on Github.  You can use it to understand how Winforms works under the hood. 

Winforms is a .NET wrapper over Windows user interface libraries, such as User32 and GDI+.  It also offers "control and functionality ... unique to Windows Forms" (taken from README.md on Github). 

GitHub Desktop

GitHub Desktop enables you to work with projects hosted on GitHub. 

It is an open source application based on Electron (software framework to create desktop applications with web technologies: HTML, CSS and JavaScript with a Chromium browser engine front end and a Node.js backend, used in Visual Studio Code). 

Roughly speaking it is a visual version of the CLI. 

GitHub Copilot is Making Waves in Development Teams

GitHub Copilot is the new pair programmer on the block. One key application of it is writing test code.