36Kr reports that Zhipu told Jiemian News on September 21 that its ZCode coding tool will be officially open-sourced, after the China Academy of Information and Communications Technology and NSFOCUS audited the data-upload incident and found the zcode-prod Alibaba Cloud bucket empty, all objects deleted, and the v3.14.0 client fully remediated with no path that snapshots or exfiltrates local repositories. Zhipu, which first apologized on September 18 after a developer found the client uploading whole workspaces to Alibaba Cloud OSS by default with no off switch, says it will publish monthly code-security audit reports and open a public vulnerability-reporting channel as it moves ZCode toward community governance.
Zhipu open-sources ZCode after audits find no retained cloud data
36Kr reports that Zhipu told Jiemian News on September 21 that its ZCode coding tool will be officially open-sourced, after the China Academy of Information and Communications Technology and NSFOCUS audited the data-upload incident and found the zcode-prod Alibaba Cloud bucket empty, all objects deleted, and the v3.14.0 client fully remediated with no path that snapshots or exfiltrates local repositories. Zhipu, which first apologized on September 18 after a developer found the client uploading whole workspaces to Alibaba Cloud OSS by default with no off switch, says it will publish monthly code-security audit reports and open a public vulnerability-reporting channel as it moves ZCode toward community governance.
Source: 36Kr