AI Coding Agent Git Checkout Resolving Ambiguous SHA/FETCH_HEAD Ref
Detects Git commands initiated by AI coding agent processes that perform a checkout of a specific 40-character SHA hash or a FETCH_HEAD reference. This behavior is potentially indicative of a supply chain attack where an AI plugin agent is being instructed to swap code components or load specific, potentially malicious, commit versions from a remote repository.
Sigma
