Ben Kehoe benkehoe

Risk Assessment of GitHub Copilot

0xabad1dea, July 2021

this is a rough draft and may be updated with more examples

GitHub was kind enough to grant me swift access to the Copilot test phase despite me @'ing them several hundred times about ICE. I would like to examine it not in terms of productivity, but security. How risky is it to allow an AI to write some or all of your code?

Ultimately, a human being must take responsibility for every line of code that is committed. AI should not be used for "responsibility washing." However, Copilot is a tool, and workers need their tools to be reliable. A carpenter doesn't have to

	# https://gist.github.com/althonos/6914b896789d3f2078d1e6237642c35c

	[metadata]
	name = {name}
	version = file: {name}/_version.txt
	author = Martin Larralde
	author_email = [email protected]
	url = https://github.com/althonos/{name}
	description = {description}
	long_description = file: README.md

	def paginate(method, **kwargs):
	client = method.__self__
	paginator = client.get_paginator(method.__name__)
	for page in paginator.paginate(**kwargs).result_key_iters():
	for result in page:
	yield result

	# usage:
	import boto3

	[alias]
	wip = for-each-ref --sort='authordate:iso8601' --format=' %(color:green)%(authordate:relative)%09%(color:white)%(refname:short)' refs/heads