Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present in .github/workflows/jira_issue.yml, which ran when a

Reported facts: Researchers at Wiz disclosed a GitHub Actions workflow injection vulnerability in Snowflake’s public snowflake-connector-net repository, where a crafted GitHub issue could trigger command execution in a workflow that exposed internal Jira credentials. The flaw lived in .github/workflows/jira_issue.yml and was tied to how untrusted issue content interacted with the CI workflow. RealGround analysis: While this incident targets CI/CD and project automation rather than a model directly, it illustrates a critical AI supply-chain risk pattern—public repos and automation pipelines used in AI systems can be subverted to exfiltrate secrets or tamper with code that later feeds AI services. Organizations relying on open-source connectors or workflow automations in their AI stack should harden GitHub Actions, restrict secrets in workflows, and maintain SBOM and supply-chain controls to prevent similar compromise paths.