How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · AI Code-Review & Assistant Bot Hardening
Read-only mode for untrusted fork PRs
Verify that AI review bots run in a zero-privilege, read-only shadow mode for untrusted fork PRs. In shadow mode, inline code-generation commentary is restricted and privileged workflow interaction is forbidden, until a repository maintainer has cleared an initial first-time-contributor verification gate.
OWASP AISVS v1.01, requirement AC.11.7
In plain English
For pull requests from untrusted forks, run bots in a read-only mode with no privileges until a maintainer has cleared the contributor.
What good looks like
- Fork PRs trigger read-only bot behaviour.
- No privileged workflow interaction is possible.
- A maintainer action lifts the restriction.
How teams usually do it
- Separate workflows for fork PRs with read-only tokens and no secrets.
Evidence an auditor would accept
- Workflow configuration.
Common mistakes
- Bots that comment with suggested code containing secrets from the base repository.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.