Reference workflow / AppSec and product-security teams

Repository security review

Standardize repository intake, static analysis, AI-assisted review and a human-controlled final result.

Pilot this workflowUnderstand the model
Workflow contract
Audience
AppSec and product-security teams
Authorized scope
Authorized source repository or uploaded archive
Expected outcome
Consistent analysis artifacts that can be reviewed and reproduced against a known revision.
Approval policy
Review the repository scope and complete workflow before it is approved to run.
Expected artifacts
  • Tool-native scan artifacts
  • Normalized result table
  • Analyst-reviewed summary
  • Revision and execution record
Node sequence

How the workflow is composed

  1. 01
    Input

    Repository scope

    Record the repository and revision under review.

  2. 02
    Tool

    Static analysis

    Run the selected repository scanning tools.

  3. 03
    Script

    Normalize results

    Convert tool outputs into the workflow result contract.

  4. 04
    Agent

    Triage context

    Assist with grouping and summarization inside the governed workflow.

  5. 05
    Output

    Review package

    Export the reviewed artifacts for downstream use.

This blueprint describes the intended orchestration pattern. A pilot confirms the exact registered tools, worker dependencies, input schema and output contract before execution.
ChaosEngine early access

Bring your current repository security review process.

We are onboarding a focused group of security teams and helping each one translate an existing process into a governed ChaosEngine workflow.

Request Early AccessRead the docs