Grackle

grackle is a static scanner that detects fork-triggerable AI coding agents
with repository write access in GitHub Actions and GitLab CI workflows.

When an AI coding agent runs on untrusted fork input in a job that can write
to the repository and nothing checks who triggered it, prompt injection
becomes remote code execution and repository takeover under the CI token.
grackle finds that exact composition statically, before it merges. It proves
fork reachability, author and merge gates, and write capability, and reports
only the compositions that are actually exploitable.

Findings carry a severity, a confidence, the offending workflow block, a
dynamic secure-fix write-up, and control-framework references (CWE, OWASP,
MITRE ATT&CK and ATLAS, NIST, CIS). Outputs SARIF, GitLab SAST, CycloneDX
SBOM, JUnit, JSON, HTML, Markdown, YAML, CSV, and XML.

Releases are Sigstore-signed with SLSA Build Level 3 provenance.