New NIST NCCoE Resources on DevSecOps and October 28 Webinar on Agentic AI
Goran P. — Information Security Lead
If an AI agent pushes code, whose name appears in your audit trail?
NIST’s latest DevSecOps update includes plans to test how agents are identified, authenticated and authorized within the SDLC.
That’s the part I’d want to see working. When an agent requests a secret or starts a build, I want to trace the action to its delegated task and the permission used.
Can your pipeline distinguish the agent’s actions from the developer who launched it?
https://www.nist.gov/news-events/news/2026/09/new-nist-nccoe-resources-devsecops-and-october-28-webinar-agentic-ai
#DevSecOps #AISecurity #IdentitySecurity #NIST
4 reactions · 0 comments
Topics: #devsecops, #identitysecurity, #aisecurity, #nist