Sourcegraph
Ops agents

php2shell: patching PHP is easy, finding it is the hard part

Our short summary of Sourcegraph’s engineering write-up. The full story, with all the detail, is on their blog.

Read the full write-up on sourcegraph.com (opens in a new tab)

Problem

Teams struggled to locate every PHP runtime in their code to apply urgent security patches.

Solution

Sourcegraph built Deep Search to scan repositories for PHP binaries and used an agentic batch‑change system to automatically update all found instances.

Want the architecture, code and numbers? They’re in the original post.

Read the full write-up on sourcegraph.com (opens in a new tab)

More from Ops agents

All Ops agents write-ups