CI/CD pipeline verification
Unpinned actions, permission escalations, injection through untrusted inputs, rules for the pipelines AI increasingly edits.
Pipelines are code that runs with the repository’s secrets, and models edit them freely. The rule-shaped dangers are well known: third-party actions pinned to a mutable tag, workflow permissions widened to write-all, untrusted inputs interpolated into a shell step, pull_request_target with a checkout of the head. A deterministic corpus over the workflow tree is planned.
Want this built sooner?
What gets built next bends toward what connected teams actually need, tell us.