--- title: "Where Do AI Agents Fit in CI/CD Pipelines?" url: https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw source_url: https://spacelift.io/blog/agentic-cicd type: article source: "Spacelift" published: 2026-07-30T10:44:21.191Z updated: 2026-07-30T12:19:16.514Z tags: ["security", "devops", "ai-agents", "cicd", "github-actions"] reading_time: 19 upvotes: 14 comments: 2 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Where Do AI Agents Fit in CI/CD Pipelines? **[Spacelift](https://daily.dev/sources/spacelift)** · 19 min read · 14 upvotes · 2 comments ## Summary AI agents can be embedded at five key points in CI/CD pipelines: pull request review, build failure triage, test selection and repair, vulnerability patching, and post-deploy verification. Unlike traditional scripted pipelines, agentic CI/CD gives agents a goal rather than a command list, allowing them to reason about runtime state and handle unanticipated cases. The article covers practical implementation patterns (including GitHub Actions YAML with Claude Code), security risks like prompt injection and credential exposure, governance challenges, and a comparison of supporting tools including GitLab Duo, GitHub Copilot, Claude Code, and Snyk. Key guidance: keep agents in a proposal role, use least-privilege credentials, cap token spend, and maintain human approval gates for production deployments. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@allinonetools** · 2 upvotes > This feels like the practical direction for AI in DevOps—assist everywhere, automate carefully. **@rizzdev** · 0 upvotes > Most of these degrade loudly, which is what makes them safe. Test selection does not. A selector that quietly stops picking a path looks exactly like a passing build. --- Tags: [#security](https://daily.dev/tags/security), [#devops](https://daily.dev/tags/devops), [#ai-agents](https://daily.dev/tags/ai-agents), [#cicd](https://daily.dev/tags/cicd), [#github-actions](https://daily.dev/tags/github-actions) [View this post on daily.dev](https://daily.dev/posts/where-do-ai-agents-fit-in-ci-cd-pipelines--vpq7jfzjw)