Hacker News discussion of Strix disclosure: security firm found live GitHub PAT for basetenbot with admin access to Baseten’s production, GitOps (flux-cd), and Homebrew tap repositories.
Timeline from disclosure:
- July 13, 11:10 PM: Strix reported live token and public Harbor project
- July 14 morning: Baseten made Harbor project private; token still worked
- July 14, 4:34 PM: Baseten confirmed critical severity, rotated token
- July 17: Remaining findings closed
- September 2026: Public disclosure
Root cause: GITHUB_TOKEN build argument expanded into plain text in Docker image history[].created_by from a March 2023 build. Image was publicly pullable from Harbor registry at gcp-us-east4-zlw.registry.baseten.co.
No evidence of active exploitation before rotation was stated in the disclosure.