#sensitive-data-exposure

#sensitive-data-exposure

They are often trained on public domain code, which can be secure or insecure. The AI coding assistant is not able to identify which is which. It also rewrites code from these sources without noticing any logical issues that might exist. AI is rewarded based on whether it completes a task, not if it is done well, so it might create code that is not secure or without necessary security controls.