Companies / GitHub Copilot / incidents

GitHub Copilot: Incident with Codespaces

Impact: majorStatus: resolvedStarted Resolved (1.1 h)1 updateSource: www.githubstatus.com (opens in new tab)

Timeline of updates

  1. resolved

    On December 26, 2023, GitHub received a report through our Bug Bounty Program demonstrating a vulnerability which, if exploited, allowed access to credentials within a production container. We fixed this vulnerability on GitHub.com the same day and began rotating all potentially exposed credentials. Through this process we found some flaws in how we rotate certain credentials and are working on improving our credential rotation process. More detail can be found on our blog: https://github.blog/2024-01-16-rotating-credentials-for-github-com-and-new-ghes-patches/

From GitHub Copilot’s published incident history: for incidents before Rewindex began polling this status page, only the final update text is available.

Impact, status and times are the vendor’s own, as last archived. View on www.githubstatus.com (opens in new tab). GitHub Copilot profile · Recent GitHub Copilot incidents · Markdown · JSON