A vulnerability in VS Code's issue management function and a lack of authentication checks enabled the researcher to obtain push access, and write to the repository.

Learn how to add a GitHub repository to VS Code as well as how to install a handy extension to manage pull requests and issues.

GitHub has enabled push protection by default for all public repositories to prevent accidental exposure of secrets such as access tokens and API keys when pushing new code.

Learn how to unlock GPT-5 in VS Code using GitHub Copilot Pro. Here are the steps and how to bypass usage limits using your API key.