ast

1
Securing AI Pull Requests: Building a Deterministic AST Audit Harness in GitHub Actions sitepoint.com
A step‑by‑step tutorial for building a deterministic AST‑based security scanner that runs in GitHub Actions to catch prototype‑pollution, high‑entropy secrets, and unauthorized network egress in AI‑generated pull requests.
SitePointsitepoint.com3d19 min
2
Securing AI Agent Tool Execution with TypeScript AST Sandboxes sitepoint.com
The article shows how to protect AI‑generated shell/SQL commands by parsing them with real AST parsers (tree‑sitter for Bash, Babel for JS‑embedded SQL) and enforcing structural allowlists plus command/path whitelists, instead of fragile regex filters.
SitePointsitepoint.com15h21 min

Securing AI Pull Requests: Building a Deterministic AST Audit Harness in GitHub Actionssitepoint.com