GitHubCommand Injection via Branch Name Exposes GitHub Token in AI Coding Agents4 min read·4h ago·via DevOps.com