[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-grok-build-was-sending-full-git-repos-to-xais-cloud":10,"sections":34},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},4708,"grok-build-was-sending-full-git-repos-to-xais-cloud","Grok Build Was Sending Full Git Repos to xAI's Cloud","A security researcher found the coding CLI uploaded entire repositories, including secrets and API keys, at 27,800 times the data a task actually required.","xAI's Grok Build coding CLI was quietly shipping your entire Git history to a cloud bucket you didn't control.\n\nA security researcher published a wire-level analysis on July 12 showing that Grok Build packaged developers' full tracked repositories before sending them to a Google Cloud Storage bucket. That payload included committed secrets, API keys, and the complete Git history, not just the files relevant to the task at hand. The upload volume ran to roughly 27,800 times the data the coding operation actually needed. xAI has not, as of publication, publicly explained the design choice.\n\nThe gap between what a tool says it does and what it actually transmits is the core problem here. Developers routinely commit credentials to private repos, trusting that local tooling stays local. An undisclosed bulk upload breaks that assumption entirely, and the presence of a third-party bucket, Google Cloud Storage rather than xAI's own infrastructure, adds another party to the chain. Any breach or misconfiguration there becomes your breach too.\n\nThis is not the first AI coding tool caught over-reaching on data collection, but the scale differential, 27,800x the necessary payload, makes the \"it was for context\" defense harder to sustain. Competitors like GitHub Copilot and Cursor have faced scrutiny over telemetry and code transmission, but they have been more explicit about what leaves the machine. Grok Build apparently was not.","[\"security\",\"ai\",\"developer-tools\",\"data-privacy\"]","2026-07-14T20:48:20.000Z","2026-07-14T21:49:04.706Z","2026-07-14T21:49:07.928Z","published",null,[],"security",[24,26,27,28],"ai","developer-tools","data-privacy",[30],{"name":31,"url":32},"The Next Web","https:\u002F\u002Fthenextweb.com\u002Fnews\u002Fgrok-build-uploaded-entire-git-repositories-secrets",0,{"sections":35},[36,40,44,49,54,59,64,69,74,79,84,88,93,98],{"name":37,"slug":26,"count":38,"latest_published_at":39},"AI",2583,"2026-07-15T21:33:20.000Z",{"name":41,"slug":24,"count":42,"latest_published_at":43},"Security",294,"2026-07-15T19:59:48.000Z",{"name":45,"slug":46,"count":47,"latest_published_at":48},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Policy","policy",158,"2026-07-16T00:02:48.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",122,"2026-07-14T19:46:26.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Consumer Tech","consumer-tech",93,"2026-07-13T13:20:48.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Software","software",70,"2026-07-13T19:52:25.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Science","science",66,"2026-07-10T10:29:37.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Dev Tools","dev-tools",59,"2026-07-07T04:00:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":85,"slug":86,"count":82,"latest_published_at":87},"Startups","startups","2026-06-29T20:55:50.000Z",{"name":89,"slug":90,"count":91,"latest_published_at":92},"General","general",29,"2026-07-10T22:28:58.000Z",{"name":94,"slug":95,"count":96,"latest_published_at":97},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":99,"slug":100,"count":101,"latest_published_at":102},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]