sec-agent-workflow

CI workflow runs an agent on untrusted input with shell or write access.

warning Hidden content and security Not active yet

All rules73

Not active in this release

The id sec-agent-workflow is reserved in the rule registry for a later release. No code emits it in version 0.3.0, so it never appears in a finding, in SARIF or in the config hints, and naming it in .asitisrc.json gives an "unknown rule id" error until it ships.

What it will catch: CI workflow runs an agent on untrusted input with shell or write access.

The rules index lists what runs today. Progress on new rules is in the repository.