From 8ba43323b144c008e89db9b44d4b3ca6c8be6bf3 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 19 Mar 2026 13:34:46 +0000 Subject: [PATCH 1/2] Initial plan From 9fd75074969c4af4282a1eb09897c1e9c00a73b5 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Thu, 19 Mar 2026 13:40:02 +0000 Subject: [PATCH 2/2] docs: update security features slide with supply chain integrity and GitHub Guard sections Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- docs/slides/index.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/docs/slides/index.md b/docs/slides/index.md index 047f2e1fa5..cd7cfca445 100644 --- a/docs/slides/index.md +++ b/docs/slides/index.md @@ -559,6 +559,17 @@ Even if one layer is compromised, multiple additional security controls remain i - Safe outputs for write operations - Explicit permission grants +**Supply Chain Integrity:** + +- Classic: GitHub Actions pinned to commit SHAs at compile time +- Agentic: Protected files guard CI/CD configuration from tampering + +**GitHub Guard:** + +- `min-integrity` restricts agent access by content trust level +- Secrecy & integrity metadata on safe output messages +- Automatic `min-integrity: approved` for public repositories + **Monitoring:** - Threat detection