GitHub Agentic Workflows

Reported Context (2)

GitHub describes related principles in the security architecture for GitHub Agentic Workflows. Agents are treated as untrusted, execution is isolated, service access is mediated, and output is constrained rather than How to Constrain AI Agent Identities, Tools and Actions
A particularly direct example appeared in July 2026 with GitLost, research against GitHub Agentic Workflows. Researchers demonstrated a workflow that processed issues from a public repository while also having read Enterprise AI Agents’ Cyber Capabilities Make Governance and Access Controls Critical

CVE (2)

People (2)

Vendors (10)

Products (14)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.