4. No Version Lock or Artifact Integrity
4. No Version Lock or Artifact Integrity
Tools or agents update silently over time, especially from Git-based pulls.
Tech Detail:
- No tool.lock or SHA256 pinned tool_bundle.tgz
- Mutable containers load latest logic on restart
Exploit Potential:
- Attacker performs Git push to alter agent execution chain
- Regression bugs or backdoors introduced silently
Mitigation:
- Use hash-based locking (e.g., tool.yaml + tool.hash)
- Validate with SHA256 at runtime using sigstore or Notary