feat(code-scanning): add AI Agent ActionGate security starter workflow

[AAH20]

Summary

Adds the AI Agent ActionGate Security starter workflow and properties under code-scanning/ai-agent-action-gate.yml and code-scanning/properties/ai-agent-action-gate.properties.json.

Problem Solved

As developer and enterprise repositories deploy autonomous multi-agent systems and LLM integrations (LangChain, LangGraph, CrewAI, AutoGen, LlamaIndex), security teams require automated CI/CD checks to:

1. Detect Un-Gated Agent Tool Calls (OWASP Top 10 for LLMs - LLM06): Enforcing static analysis on tool declarations and execution branches before merging to production.
2. Verify Zero-Trust ActionBoundary Enforcement: Ensuring code complies with never_equate_intent_to_approval.
3. Generate Audit Receipts for Step Summaries: Providing tamper-evident audit logs directly in GitHub PRs for SOC 2 Type II and ISO 42001 compliance reviews.

Files Added

• code-scanning/ai-agent-action-gate.yml: Automated CI/CD security workflow for AI agent repositories.
• code-scanning/properties/ai-agent-action-gate.properties.json: Catalog metadata for GitHub Actions starter workflow selector.

Testing & Validation

• Verified YAML syntax and JSON properties schema against repository conventions.

Commercial & Ecosystem Context

Maintained by A2Z SOC for enterprise AI application security and automated governance.

Documentation & Instant Audits:

• Instant Audit ($499): https://a2zsoc.com/productized-services#instant-audit-tripwire
• Consultation & CI/CD DevSecOps Sprints: https://a2zsoc.com/consultation

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.