OpenCode

OpenCode is an open-source AI coding assistant that runs in a developer's terminal and can read, edit, and execute code in a project on the developer's behalf. Because tools like this can be given broad access to source code, credentials, and local files, they introduce data handling, third-party model usage, and security questions that enterprise compliance teams need to review before developers adopt them. Organizations should confirm where prompts and code are sent, which AI model providers are involved, and whether approved use policies cover tools that act autonomously inside a codebase.

1 item

ResearchGlobal2026-10-20

OpenCode Breach Exposes API Keys for Anthropic, OpenAI, and Google

A security breach of OpenCode's Console service may have exposed API keys that customers stored to access Anthropic, OpenAI, and Google AI models. The incident shows that third-party AI platform tools can become a single point of failure for credentials across multiple major provider ecosystems. Affected organizations face immediate credential exposure risk and longer-term gaps in vendor notification and key governance programs.

OpenCode Anthropic OpenAI Google API credential security data breach third-party AI risk vendor due diligence