We got admin access to Baseten's production GitHub in 25 minutes

Strix's autonomous pentesting agent found a public Harbor container registry belonging to Baseten, pulled a container image from it, and extracted a live GitHub personal access token with admin rights on Baseten's production repositories, all in 25 minutes with no human in the loop. The chain is mundane by security standards: a misconfigured public registry, a credential baked into an image, and a token with far more scope than the image needed. What is new is the speed. An agent that can recon a public registry, decide what to pull, extract a credential, and confirm its scope end to end in under half an hour turns a finding that might once have taken a human researcher a day into something that runs unattended. Baseten is one example; the same registry-to-credential pattern is common wherever container images are built with secrets baked in rather than injected at runtime. Teams that have not audited what their CI publishes to public registries, or that still bake long-lived tokens into images, now have a concrete demonstration of how fast that mistake gets found.