AI-Assisted Development Process
22 items · source
Development Process
- Inventory all AI coding tools used by developers.
- Inventory all autonomous coding agents.
- Identify which repositories each AI tool can access.
- Identify which branches each AI tool can modify.
- Identify whether AI tools can execute commands.
- Identify whether AI tools can access terminals.
- Identify whether AI tools can access local files.
- Identify whether AI tools can access cloud credentials.
- Identify whether AI tools can access production systems.
- Identify whether AI tools can access secrets.
- Identify whether AI tools can create pull requests.
- Identify whether AI tools can merge pull requests.
- Identify whether AI tools can modify CI/CD.
- Identify whether AI tools can modify infrastructure.
- Identify whether AI tools can install dependencies.
- Identify whether AI tools can modify lockfiles.
- Identify whether AI tools can modify security configuration.
- Identify whether AI-generated code requires human review.
- Require security-sensitive changes to receive human review.
- Require AI-generated authentication/authorization changes to receive security review.
- Require AI-generated infrastructure changes to receive security review.
- Require AI-generated CI/CD changes to receive security review.
# AI-Assisted Development Process ## Development Process * [ ] Inventory all AI coding tools used by developers. * [ ] Inventory all autonomous coding agents. * [ ] Identify which repositories each AI tool can access. * [ ] Identify which branches each AI tool can modify. * [ ] Identify whether AI tools can execute commands. * [ ] Identify whether AI tools can access terminals. * [ ] Identify whether AI tools can access local files. * [ ] Identify whether AI tools can access cloud credentials. * [ ] Identify whether AI tools can access production systems. * [ ] Identify whether AI tools can access secrets. * [ ] Identify whether AI tools can create pull requests. * [ ] Identify whether AI tools can merge pull requests. * [ ] Identify whether AI tools can modify CI/CD. * [ ] Identify whether AI tools can modify infrastructure. * [ ] Identify whether AI tools can install dependencies. * [ ] Identify whether AI tools can modify lockfiles. * [ ] Identify whether AI tools can modify security configuration. * [ ] Identify whether AI-generated code requires human review. * [ ] Require security-sensitive changes to receive human review. * [ ] Require AI-generated authentication/authorization changes to receive security review. * [ ] Require AI-generated infrastructure changes to receive security review. * [ ] Require AI-generated CI/CD changes to receive security review. 22 items · https://github.com/FarzamHabibi/pre-production-checklist · CC BY 4.0