CLAIM-2026-09-21-02
Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI all install marketplace plugins by pinned commit SHA, and none of the four verified that the checkout landed on the pinned commit.
Why it matters
The pinned SHA is the control most teams rely on for plugin supply chain. It was not being enforced in any of the four.
Sources
- airsecurity2026pluginshe
- helpnetsecu2026zeroclick