No One Talks Enough About Security for AI Coding. Here's How I Do It in My Workflows

This post introduces a security-focused workflow for AI-generated code. It highlights the vulnerability of AI-generated code and proposes a solution using Archon (an open-source harness builder) and SonarQube (a static analysis tool) as a mandatory gate within the AI coding workflow. The workflow ensures that security scans are performed and that code is only accepted if it passes these checks, addressing the limitations of relying solely on prompts or additional review agents for security. The contribution is the practical implementation of this secure AI coding workflow, demonstrating its end-to-end execution and the types of vulnerabilities it can catch.