# One Untrusted String, Three Trust Boundaries
# Optimus Labs · Civilizations — https://www.optimuslabs.io/research/briefings/wiz-red-agent-snowflake-trust-boundaries
# Published: 2026-08-17 | Severity: high
# Affected: Wiz, Snowflake, GitHub, Atlassian Jira
#
# Machine-readable siblings:
#   STIX 2.1: https://www.optimuslabs.io/research/briefings/wiz-red-agent-snowflake-trust-boundaries.stix.json
#   MISP event: https://www.optimuslabs.io/research/briefings/wiz-red-agent-snowflake-trust-boundaries.misp.json
#   Markdown: https://www.optimuslabs.io/research/briefings/wiz-red-agent-snowflake-trust-boundaries.md

## domain
github.com
snowflake.net

## file
jira_issue.yml

## email
qa@snowflake.net

## narrative-indicators
# Repo: github.com/snowf1akedb/snowf1ake-connector-net
# Workflow: jira_issue.yml (`run:` step interpolating the issue title)
# Exfil listener: *.oast.me (out-of-band callback)
# Secrets exposed: JIRA_API_TOKEN, JIRA_USER_EMAIL, JIRA_BASE_URL
# Replayed identity: qa@snowflake.net
# Tracking: no CVE assigned; HackerOne #3819931; PR #1218; CWE-78