Version updated for https://github.com/jinyounghub/agentic-workflow-guard to version v0.2.1. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. Action Summary The GitHub Action agentic-workflow-guard is a static analyzer designed to detect and prevent AI-agent-specific vulnerabilities in GitHub Actions workflows. It focuses on identifying potential risks where untrusted event data, such as issue bodies, PR comments, branch names, or commit messages, are passed into AI agent prompts, potentially leading to write permissions, scripts, release commands, or secrets being executed with elevated privileges. This action helps ensure the security of CI/CD pipelines by monitoring for these high-risk patterns without requiring access to API keys or sending sensitive workflow content to external models.

Version updated for https://github.com/jinyounghub/agentic-workflow-guard to version v0.2.0. This action is used across all versions by 0 repositories. Action Type This is a Node action using Node version 20. Go to the GitHub Marketplace to find the latest changes. What’s Changed v0.2.0 Public OSS release focused on real-world adoption: noise control, data-flow precision, catalog verification, and contributor onboarding. Added Config file support with rule disable, severity override, path excludes, and narrow suppressions. Baseline support for accepted existing findings. Finding fingerprints and active/suppressed/baselined report state. Improved GitHub expression handling and one-step env data-flow detection for AI output references. Verified AI action catalog metadata and documentation. Contributor onboarding docs and beginner-friendly synthetic fixtures. Verification npm run lint npm test npm run build npm audit –audit-level=moderate npm pack –dry-run workflow self-scan fixture scans SARIF JSON parse check