agent-security
https://github.com/solongate/agent-security
Go
Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported1 Subscribers
Add a CodeTriage badge to agent-security
Help out
- Issues
- sandbox: Windows Launch runs agent unconfined when icacls deny fails
- sandbox: BoxAgent doesn't bind nvm/volta/asdf node path into sandboxed root
- cli/observability: pollCloud dedup map full wipe re-emits duplicate cloud audit entries
- App's `run --explain` is human-gated for recon prevention, but `sandbox --explain` is not
- cliutil Parse() silently swallows a subcommand into a boolean flag's value
- observability/audit: --filter and --signal are compared case-sensitively, so lowercase input silently matches nothing
- observability/watch: `solongate watch` has no help/usage handling at all
- Core local-logs "enabled" flag parsed but never honored, so disabling local audit logs doesn't do anything
- {"title": "core: Policies.Active() sets both DLPBlock and DLPRedact for block mode, reintroducing the bug a deleted comment says was fixed"}
- readLog() in core silently drops audit history past 16MB from every read API (list/stats/whitelist/block), with no rotation and no signal to the caller
- Docs
- Go not yet supported