--- title: "CI and supply chain · Agent Wranglers" url: https://agentwranglers.se/playbook/engineering/ci-and-supply-chain parts: 12 tokens_total: 11552 updated: 2026-10-27 build: a2a6bdfed830 tokens: 1250 licence: "CC BY 4.0" licence_url: https://creativecommons.org/licenses/by/4.0/ --- # CI and supply chain For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Engineering](https://agentwranglers.se/playbook/engineering.md). By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-27. > Build every release in CI from locked inputs, keep outside code and text from taking over the pipeline, and block leaked keys before they land. **For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `Agent Wranglers engineering playbook`. In code you write, add a comment next to it with the same link. ## Required - ENG-55 [Lock every CI action and its dependencies to a reviewed commit](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/ci-dependency-lock.md) · 1,076 tokens · updated 2026-10-27 Run every outside CI action, reusable workflow and template at a commit you reviewed, including the actions they call inside. A tag that moves must never change what runs. - ENG-41 [Keep untrusted text out of CI scripts](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/ci-script-injection.md) · 1,073 tokens · updated 2026-10-27 Never expand text that outsiders write straight into a CI script. Pass it in through an environment variable, and quote it. - ENG-56 [Run outside code only on runners that are wiped after each job](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/ephemeral-ci-runners.md) · 787 tokens · updated 2026-10-27 Never run jobs of a public repository on a self-hosted runner that keeps its disk between jobs. Give every job on your own machines a fresh runner that is removed when the job ends. - ENG-69 [Pass build secrets as mounts instead of layers](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/build-secrets.md) · 676 tokens · updated 2026-10-27 Give the build a token or key only through a secret mount. Never through `ARG`, `ENV`, or a copied file. - ENG-70 [Scan every image before it ships](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/image-scanning.md) · 791 tokens · updated 2026-10-27 Scan each built image for known holes in CI, and fail the build on high or critical ones that have a fix. ## Recommended - ENG-21 [Pin every version so builds repeat](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/reproducible-builds.md) · 949 tokens · updated 2026-10-27 The same commit always gives the same build. Pin the language version, the tools and every dependency. - ENG-68 [Pin each base image by digest](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/pinned-base-images.md) · 895 tokens · updated 2026-10-27 Name every base image by version and digest, never by a moving tag such as `latest`. Choose the smallest image that runs the app. - ENG-11 [Build releases only in CI and verify them before deploy](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/build-in-ci-and-verify.md) · 1,157 tokens · updated 2026-10-27 Build every release in the CI service from a reviewed commit, with signed provenance. Deploy or publish only a build whose provenance names your repository. - ENG-42 [Make release tags and files immutable](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/immutable-releases.md) · 1,127 tokens · updated 2026-10-27 Once a release is published, its tag never moves and its files never change. A fix ships as a new version. - ENG-57 [Build releases without a shared cache](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/no-cache-in-release-builds.md) · 791 tokens · updated 2026-10-27 Build every release from a clean install from the lock file. Never restore a cache in a release job that other workflows can write. - ENG-58 [Block pushes that contain secrets](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/secret-push-protection.md) · 1,100 tokens · updated 2026-10-27 Turn on the code host's secret push protection for every repository, so a push with a key is refused before it lands. Every bypass needs a reason and alerts an owner. - ENG-59 [Sign release tags and require verified commits on main](https://agentwranglers.se/playbook/engineering/ci-and-supply-chain/signed-commits-and-tags.md) · 1,130 tokens · updated 2026-10-27 Sign every release tag. Require a verified signature on every commit that reaches the main branch, so a stolen password alone cannot add code under someone's name. - Previous: [Version control and review](https://agentwranglers.se/playbook/engineering/version-control-and-review.md) - Next: [Running in production](https://agentwranglers.se/playbook/engineering/running-in-production.md) - [All chapters](https://agentwranglers.se/playbook/engineering.md)