AI-Assisted Secure Coding (Appendix C) · CI/CD Pipeline Hardening Specific to AI Augmentation
Security review for workflow file changes
Verify that changes to workflow definition files (`.github/workflows/*`, `.gitlab-ci.yml`, `Jenkinsfile`, Argo, Tekton, and equivalents) are detected on every PR and route through an elevated review path that includes a security reviewer, regardless of who the contributor is or whether AI was involved. AI agents must not be granted bypass authority over this review path.
OWASP AISVS v1.01, requirement AC.12.5
In plain English
Workflow definition files control what your pipeline does and with which secrets. Detect any change to them in every pull request, and send it through an elevated review that includes a security reviewer. This applies to every contributor, with or without AI involvement. AI agents get no bypass.
What good looks like
- Changes to workflow definition files are detected automatically on every PR.
- They need review by a security reviewer in addition to the normal review.
- The rule covers every CI system and file location in use, including reusable workflows and shared templates.
- No agent or bot identity can bypass the review.
How teams usually do it
- CODEOWNERS entries for workflow paths (for example .github/workflows/, .gitlab-ci.yml, Jenkinsfile) assigned to the security team.
- Rulesets with no bypass for bots, and protection of the CODEOWNERS file itself.
- Automated linting of workflow changes to help the reviewer.
Suggested evidence
- CODEOWNERS and rulesets.
- A sample workflow change with its security review.
Common mistakes
- Reusable workflows or composite actions in another folder or repository that the rule does not cover.
- Scripts called by workflows that can be changed without the same review.
- A bot on the bypass list.
Not sure which requirements apply to your system? Take the assessment, or browse every guide in this chapter.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.