Vibe codingMediumvc-g173

Subject Ai code reviewLevel Mid–Senior~13 minCommon in Security interviewsIndustries Software development

Question

To help you debug a failing deploy, an AI added logging to this GitLab CI job. It "works" — the pipeline now prints useful context. Your security team disables the project's CI minutes and pages you. Why?

yaml

1deploy:2  stage: deploy3  script:4    - echo "Deploying with config:"5    - env6    - echo "AWS key is $AWS_SECRET_ACCESS_KEY"7    - aws s3 sync ./build s3://acme-prod-site --delete8  rules:9    - if: '$CI_COMMIT_BRANCH == "main"'

What a strong answer looks like

Treat the AI’s output as a draft to verify, not an answer to trust. Name the specific flaw and the input that triggers it, say how you’d catch it — tests, edge cases, reading critically — and how you’d re-prompt or decompose to get it right.

Learn the concepts

Describe your solution

Vibe coding: describe the solution in plain language (or narrate it) and the coach grades your approach. Generating runnable code from your description is coming next.

Run or narrate your approach, then ask the coach.