<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>MATRIX · Agentic Workflows</title>
  <link>https://derekwang2002.github.io/ai-intelligence/projects/github-agentic-workflows/</link>
  <description>AI 模型、Agent、工程与基础设施的重要变化，附一手来源与建议等级。</description>
  <language>zh-CN</language>
  <lastBuildDate>Mon, 02 Nov 2026 16:56:00 GMT</lastBuildDate>
  <atom:link href="https://derekwang2002.github.io/ai-intelligence/feeds/projects/github-agentic-workflows.xml" rel="self" type="application/rss+xml"/>
  <item>
    <title>GitHub Agentic Workflows 追踪跨步骤 secret 泄漏</title>
    <link>https://derekwang2002.github.io/ai-intelligence/events/ev-20261025-02/</link>
    <guid isPermaLink="false">ev-20261025-02-published</guid>
    <pubDate>Mon, 26 Oct 2026 16:03:24 GMT</pubDate>
    <category>新事件</category>
    <category>TRIAL</category>
    <description>&lt;p&gt;GitHub Agentic Workflows 0.93.5 增加跨 step output 跟踪凭据传递的静态分析，只在受限的 safe-output job 中允许网络凭据，返回不含 secret 的崩溃诊断，并固定已修补的 runtime 依赖。同日的 1.0.0 明确标为 prerelease，不按 GA 处理。&lt;/p&gt;&lt;p&gt;&lt;strong&gt;为什么读：&lt;/strong&gt;GitHub Agentic Workflows 把跨步骤凭据传递纳入静态分析，为 agent workflow 增加具体安全边界。&lt;/p&gt;&lt;p&gt;建议等级：TRIAL&lt;/p&gt;&lt;p&gt;来源：&lt;a href=&quot;https://github.com/github/gh-aw/releases/tag/v0.93.5&quot;&gt;GitHub Agentic Workflows 0.93.5 release&lt;/a&gt; · &lt;a href=&quot;https://github.github.com/gh-aw/blog/2026-10-26-weekly-update/&quot;&gt;GitHub Agentic Workflows weekly update&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
