AI-Assisted Secure Coding (Appendix C) · CI/CD Pipeline Hardening Specific to AI Augmentation
Stream pipeline logs to security monitoring
Verify that pipeline audit logs (workflow runs, secret access, runner registration, permission grants, OIDC token issuance) are streamed in real time to centralized security monitoring. Detection rules are tuned for AI-augmented threat patterns: bulk PR creation from new accounts, workflow-file modifications in fork PRs, unexpected secret access from AI-runner pools, and unusual egress (webhooks, paste sites, bin services) from AI workloads.
OWASP AISVS v1.01, requirement AC.12.6
In plain English
Send pipeline audit logs to your central security monitoring in real time, with detection rules written for AI-related attack patterns. The logs cover workflow runs, secret access, runner registration, permission grants and OIDC token issuance. They are where a pipeline compromise first becomes visible.
What good looks like
- Pipeline audit logs stream to central monitoring in real time.
- Detection rules cover bulk PR creation from new accounts, workflow-file changes in fork PRs, unexpected secret access from AI runner pools, and unusual egress from AI workloads to webhooks, paste sites and bin services.
- Alerts are triaged by someone who understands CI/CD.
- Log retention is long enough to investigate slow attacks.
How teams usually do it
- Audit log streaming from the code platform to your SIEM.
- Runner-level network monitoring as the source for the egress rules.
- Rules reviewed after each public CI/CD incident.
Suggested evidence
- Streaming configuration.
- Detection rules and recent alerts.
Common mistakes
- Downloading audit logs only during incidents.
- Collecting logs with no rules on them.
- Relying on the platform's default retention, which is often too short for an investigation.
Not sure which requirements apply to your system? Take the assessment, or browse every guide in this chapter.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.