{"id":"https://openalex.org/W7164205220","doi":"https://doi.org/10.48550/arxiv.2606.09935","title":"GitInject: Real-World Prompt Injection Attacks in AI-Powered CI/CD Pipelines","display_name":"GitInject: Real-World Prompt Injection Attacks in AI-Powered CI/CD Pipelines","publication_year":2026,"publication_date":"2026-06-07","ids":{"openalex":"https://openalex.org/W7164205220","doi":"https://doi.org/10.48550/arxiv.2606.09935"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.09935","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09935","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.09935","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125147267","display_name":"Jafar Isbarov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Isbarov, Jafar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138359108","display_name":"Umid Suleymanov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Suleymanov, Umid","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138365627","display_name":"Ilia Shumailov","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shumailov, Ilia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138375565","display_name":"Murat Kantarcioglu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kantarcioglu, Murat","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.3555000126361847,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.3555000126361847,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.19290000200271606,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.07840000092983246,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sandbox","display_name":"Sandbox (software development)","score":0.760699987411499},{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.6797000169754028},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.6506999731063843},{"id":"https://openalex.org/keywords/workaround","display_name":"Workaround","score":0.5770000219345093},{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.5436000227928162},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.4341000020503998},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.4327000081539154},{"id":"https://openalex.org/keywords/pipeline-transport","display_name":"Pipeline transport","score":0.3880999982357025},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.34279999136924744}],"concepts":[{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.760699987411499},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7542999982833862},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7423999905586243},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.6797000169754028},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.6506999731063843},{"id":"https://openalex.org/C194541083","wikidata":"https://www.wikidata.org/wiki/Q457174","display_name":"Workaround","level":2,"score":0.5770000219345093},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.5436000227928162},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.4341000020503998},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.4327000081539154},{"id":"https://openalex.org/C175309249","wikidata":"https://www.wikidata.org/wiki/Q725864","display_name":"Pipeline transport","level":2,"score":0.3880999982357025},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.34279999136924744},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.3375000059604645},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.32280001044273376},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3199000060558319},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.31709998846054077},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3093000054359436},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.30630001425743103},{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.2897999882698059},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.2777000069618225},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.27459999918937683},{"id":"https://openalex.org/C2778024590","wikidata":"https://www.wikidata.org/wiki/Q2357432","display_name":"Cheating","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.2646999955177307},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.2605000138282776},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2531999945640564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.09935","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09935","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.09935","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09935","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6340194344520569}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI-powered":[0],"agents":[1,25],"are":[2,133,151],"increasingly":[3],"embedded":[4],"in":[5,59,101,141,195],"continuous":[6,9],"integration":[7],"and":[8,21,84,95,113,125,145,161,181,185],"delivery/deployment":[10],"(CI/CD)":[11],"pipelines":[12],"to":[13,135,191],"autonomously":[14],"review":[15],"pull":[16],"requests":[17],"(PRs),":[18],"triage":[19],"issues,":[20],"maintain":[22],"codebases.":[23],"These":[24],"ingest":[26],"untrusted":[27],"content":[28],"while":[29],"operating":[30],"with":[31,44],"elevated":[32],"repository":[33],"permissions,":[34],"making":[35],"them":[36],"a":[37,64],"natural":[38],"target":[39],"for":[40,54],"prompt":[41,56],"injection":[42,57],"attacks":[43,117],"supply":[45],"chain":[46],"consequences.":[47],"We":[48,127],"present":[49],"GitInject,":[50,104],"an":[51],"open-source":[52],"framework":[53],"evaluating":[55],"vulnerabilities":[58,150],"real,":[60],"live":[61],"GitHub":[62],"workflows,":[63],"widely":[65],"deployed":[66],"instance":[67],"of":[68],"CI/CD":[69,157],"pipelines.":[70],"Unlike":[71],"prior":[72],"agent":[73],"security":[74],"benchmarks":[75],"that":[76,90,129,146],"simulate":[77],"tool":[78],"calls,":[79],"GitInject":[80,187],"provisions":[81],"ephemeral":[82],"repositories":[83],"triggers":[85],"actual":[86],"workflow":[87,107],"runs,":[88],"so":[89],"sandbox":[91],"constraints,":[92],"credential":[93,121],"handling,":[94],"permission":[96],"boundaries":[97],"behave":[98],"exactly":[99],"as":[100],"production.":[102],"Using":[103],"we":[105,175],"study":[106],"configurations":[108],"across":[109],"four":[110],"AI":[111],"providers":[112,132],"document":[114],"eleven":[115],"named":[116],"spanning":[118],"config-file":[119],"injection,":[120],"exfiltration,":[122],"judgment":[123],"manipulation,":[124],"availability.":[126],"find":[128],"all":[130],"tested":[131],"susceptible":[134],"at":[136],"least":[137],"one":[138],"attack":[139,173],"class":[140],"their":[142],"default":[143],"configuration,":[144],"the":[147,177],"most":[148],"critical":[149],"structural:":[152],"they":[153],"arise":[154],"from":[155,165],"how":[156],"infrastructure":[158],"handles":[159],"credentials":[160],"configuration":[162],"files,":[163],"not":[164],"any":[166],"specific":[167],"model's":[168],"behavior.":[169],"For":[170],"each":[171],"confirmed":[172],"class,":[174],"identify":[176],"minimum-cost":[178],"workflow-level":[179],"countermeasure":[180],"analyze":[182],"its":[183],"coverage":[184],"limitations.":[186],"is":[188],"released":[189],"publicly":[190],"facilitate":[192],"further":[193],"research":[194],"this":[196],"direction.":[197]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-11T00:00:00"}