{"data":{"id":"af14f67b-751e-4dbd-a9a2-1262f065252f","title":"ADLC Security Best Practices for Teams Shipping with Coding Agents | Endor Labs","summary":"Endor Labs describes Agentic Development Lifecycle (ADLC) security, the practices that control what AI coding agents can access, do, install, and ship. The article argues that most AppSec stacks only see agent work at the pull request, after the agent has already acted. It recommends inventorying agents and MCP servers, enforcing policy on agent actions, and vetting packages at install time.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.endorlabs.com/learn/adlc-security-best-practices","publishedAt":"2026-10-23T17:40:48.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["coding agents","AI coding agents","MCP servers","AGENTS.md","Veracode GenAI Code Security Report"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-23T17:40:48.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":null,"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}