How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · AI Code-Review & Assistant Bot Hardening
Sandbox review bots
Verify that AI review and assistant bots run in network-isolated, least-privilege sandboxes: a dedicated namespace, default-deny egress with an allow-list to approved APIs only, no mounted repository secrets, and ephemeral credentials only.
OWASP AISVS v1.01, requirement AC.11.4
In plain English
Run bots in isolated, least-privilege sandboxes: their own namespace, outbound traffic denied except to approved APIs, no repository secrets mounted, and only short-lived credentials.
What good looks like
- Each bot has a dedicated, isolated runtime.
- Egress is default-deny with an allow-list.
- No long-lived secrets are available.
How teams usually do it
- Dedicated runners or containers with network policies.
Evidence an auditor would accept
- Runtime and network configuration.
Common mistakes
- Running the review bot on a shared CI runner with repository secrets.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.