GitHub Agentic Workflows 0.93.5 adds static analysis that follows credential handoffs through step outputs, permits network credentials only in bounded safe-output jobs, returns secret-safe crash diagnostics and pins patched runtime dependencies. Version 1.0.0 from the same day is explicitly prerelease and is not treated as GA.
GitHub Agentic Workflows traces secret leaks through step outputs
2026-10-26Verified announcementTRIAL
GitHub Agentic Workflows 0.93.5 adds static analysis that follows credential handoffs through step outputs, permits network credentials only in bounded safe-output jobs, returns secret-safe crash diagnostics and pins patched runtime dependencies. Version 1.0.0 from the same day is explicitly prerelease and is not treated as GA.
Official · ReferenceGitHub Agentic Workflows 0.93.5 releaseOfficial · ReferenceGitHub Agentic Workflows weekly update
Availability: Public open-source GitHub release
What this means for you
For teams expressing agent behavior as GitHub Actions, secret flow across steps is a concrete safety boundary rather than a generic scanner rule. The project remains pre-1.0 and lacks independent production evidence.
Evidence & related material
Technical details & scores
| Release | 0.93.5 stable; 1.0.0 prerelease excluded |
|---|---|
| Availability | Public open-source GitHub release |
| Security | Cross-step secret-flow analysis and secret-safe crash diagnostics |
| Time Basis | Stable GitHub release published at 2026-10-25T17:17:17Z |
Technical impact 3
Engineering value 4
Adoption signal 3
Maturity 3
Verification cost 2
Risk 3