Agentic Workflow Injection Detection on GitHub Actions Agentic Workflows (full corpus)
2,079Alert CountPISCANNER
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| PISCANNERDetection Strategy=Heuristic LLM-related keyword check2026.05 | 2,079 | 78 | 78 | 0 | 418 | |
| OPENGREPDetection Strategy=Pattern matching untrusted expressions2026.05 | 1,658 | 73 | 73 | 0 | 423 | |
| CODEQLSink Specifications=Agentic-action prompt sink specifications2026.05 | 1,486 | 76 | 76 | 0 | 420 | |
| ARGUSSink Specifications=Agentic-action prompt sink specifications2026.05 | 831 | 66 | 66 | 0 | 430 | |
| TAINTAWIAnalysis Level=Workflow-wide dependency graphs and model-derived outputs2026.05 | 519 | 496 | 103 | 419 | 0 |