I love that Gemini AI Studio has a GitHub integration, but:

It is one-way only: Your code is pushed to GitHub, but AI Studio won’t pull any changes back down. So if your bright idea was to seek security review from a human or push your code through a review toolchain, you’ll be copying and pasting any changes back in.

If you make a change to your code (PR, file editor, whatever), AI Studio just makes a commit reverting your changes, adding a commit message calling them “extraneous,” “unneeded,” or (in the case of a security notification I added) “frivolous.”

In other words, it doesn’t actually know how to use GitHub, but takes a stab at gaslighting you into thinking your commits were all pointless and dumb anyhow.

5: How many times in the past ~45 days someone has asked me if they can stick Salesforce tokens in their vibecoded AI Studio app.

n: How many times someone decided to just go do that without asking.

Also on Mastodon