TheMachine Press

A daily newspaper for the age of artificial intelligence.

Morning editionPermanent story

safety security

Coding Agents Appear in 469 Security Advisories

Repository evidence maps agent-associated remediation across 189 projects while separating direct attribution from adoption signals.

Published Updated Story ID: mp-2026-11-09-017
Read the complete editionStory JSON

Summary

Repository evidence maps agent-associated remediation across 189 projects while separating direct attribution from adoption signals.

A local-Git mining pipeline found 469 candidate reviewed GitHub Security Advisories across 189 repositories, including 448 with direct tool attribution. The observational study reports agent involvement even in high- and critical-severity fixes without claiming the tools caused review outcomes.

Why it matters

Repository evidence maps agent-associated remediation across 189 projects while separating direct attribution from adoption signals.

Limits and context

No additional limitation was separately recorded.

Key claims

  1. Repository evidence maps agent-associated remediation across 189 projects while separating direct attribution from adoption signals.

    Evidence: source-2026-11-09-019

Sources

  1. arXiv preprint 2611.09808, original v1arXiv · primary research

Corrections

No corrections have been recorded for this story.