Gil Feig: Wiz found vulnerability accessing every hosted repository via single git push
Gil Feig · "We Don't Trust Agents" - What This CTO Knows That You Don't · Sourcery with Molly O'Shea · Jun 1, 2026 · at 19:32
Gil Feig, CTO of Merge, discusses automated vulnerability discovery and references a recent disclosure by cybersecurity firm Wiz.
0:00 / 0:07exact quote · 7.8s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“Basically Wiz found that they were able to do a single git push of a file and gain access to every single repository hosted on the platform.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Gil Feig
Gil Feig: Custom agent harnesses and workflow builders will become obsolete very soon
“You see a lot of people trying to build, like, a custom harness, or, You know use something like a workflow builder to build agents that are repeatable and all of that. And I just ultimately think none of it matters because we're almost at the point now where …”
Feig: AI agents cannot be trusted without hard data-leak guardrails
“We don't trust agents. We say, Hey, we can try to set rules, but there needs to be hard guardrails and blocks for things like sensitive data being sent across.”
Feig: AI Startups Raising at 100x–1,000x Multiples Will Face Failure and Layoffs
“We know specifically, like we know the numbers, we know sales figures for some of these companies raising at Hundreds of millions to billions, and again, we're looking at thousand x to, you know, hundred to thousand x multipliers, like, a lot of these companie…”
Feig: AI Coding Tools Shift Hiring Toward High-Agency 'Barrels'
“It used to be that, you know, a team that had a barrel of a PM or a manager and a bunch of ammunition could get a lot done, But now that you kind of can have one person just go use, you know, Codex, Cloud Code, whatever, to go build something, you really just …”
Feig: Open-source supply chain attacks will surge as AI agents flood pull requests
“Agents are pushing a ton of code. You don't have enough humans to read all that code, and so things are slipping by, things are getting in, and one of them was a vulnerability that gets injected into an open source package that everybody relies on and uses, an…”