How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · CI/CD Pipeline Hardening Specific to AI Augmentation
Don't leave credentials in untrusted workspaces
Verify that secrets, credentials, and pipeline job tokens are not persisted into workspaces that process AI-touched or fork-originated untrusted code. For example, set `persist-credentials: false` on checkout where the platform supports it, and scrub CI runners of cached credentials before AI tooling runs.
OWASP AISVS v1.01, requirement AC.12.2
In plain English
Do not leave secrets, credentials or job tokens in workspaces that process AI-touched or forked code.
What good looks like
- Checkout steps do not persist credentials.
- Runners are cleaned of cached credentials before AI tooling runs.
- Tests check workspaces for leftover tokens.
How teams usually do it
- Setting persist-credentials: false on checkout and cleaning runner credential caches.
Evidence an auditor would accept
- Workflow configuration.
Common mistakes
- Default checkout settings that leave the token in the git config.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.