AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...
A prompt injection in a GitHub issue title let an outsider poison Cline's CI cache and steal release tokens. What is documented, and what is not.