How to meet it
OWASP AISVS v1.01
AI-Assisted Secure Coding (Appendix C) · Secure Prompt & Context Management
Scan agent session records for credentials
Verify that on-disk session records produced by approved AI coding agents are scanned for credential material on a defined schedule shorter than the record retention period.
OWASP AISVS v1.01, requirement AC.3.7
In plain English
Scan the session records that AI coding agents save on disk for credentials, on a schedule shorter than how long those records are kept.
What good looks like
- Agent session storage locations are known.
- Scans run on a schedule shorter than the retention period.
- Found credentials are rotated.
How teams usually do it
- Secret scanners pointed at agent history and log folders.
Evidence an auditor would accept
- Scan schedule and recent results.
Common mistakes
- Not knowing where the agent stores its history.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.