Blog Post

Github Copilot in SSMS can include data in its memory, simple prompt injections ahead

,

SQL Server Management Studio (SSMS) has recently added support for Github Copilot. This is a great feature that can help with writing SQL queries and scripts sql development. However, there is a potential security risk that means that I will only be using it for local development with a database that has no externally provided data.

When evaluating GitHub copilot I think there are three core risks:

Destructive commands being run for me without me asking - I don’t want to be the first person whose copilot broke something.

Original post (opens in new tab)

Rate

★ ★ ★ ★ ★ ★ ★ ★ ★ ★

You rated this post out of 5. Change rating

Share

Share

Rate

★ ★ ★ ★ ★ ★ ★ ★ ★ ★

You rated this post out of 5. Change rating