agent-security
https://github.com/solongate/agent-security
Go
Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported1 Subscribers
Add a CodeTriage badge to agent-security
Help out
- Issues
- crypto VerifyDocument cannot distinguish a malformed signature from invalid JSON
- guard/dlp: scp/rsync/sftp egress check misses any transferred file whose name has a space
- In guard/dlp, RedactReadPlan's command rewrite corrupts commands when one path is a prefix of another
- guard/dlp (redacted-copy files in ~/.solongate/.redacted are never cleaned up)
- policy: quoted paths containing a space are shredded, letting path deny rules be bypassed
- {"title": "Policy's omitted \"enabled\" field means opposite things in the OPA path versus the Go fallback path"}
- policy: FallbackEvaluate ignores argumentConstraints and minimumTrustLevel entirely
- BuildPolicyInput hardcodes trust_level to TRUSTED, making minimumTrustLevel rules a no-op in the policy package
- Sandbox packageRoot's wrapper-dir check is dead code, so it stops climbing one level too early
- sandbox: checkWorkspaceRoot only rejects a workspace equal to $HOME, not one that contains it
- Docs
- Go not yet supported