agent-security
https://github.com/solongate/agent-security
Go
Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported1 Subscribers
Add a CodeTriage badge to agent-security
Help out
- Issues
- sandbox explain is missing the human only gate that run explain has
- The run function in packages/app has no test coverage
- Windows build of TerminalColumns always returns 0
- MaxInt and MinInt in tui/util.go duplicate the Go builtins
- packages/core/config/paths.go duplicates shared.SGDir and ProjectFlagDir
- Command extraction field allowlist lets a shell command evade CommandConstraints rules
- A policy rule with no explicit enabled field is treated oppositely by the two evaluators
- guard: writeDenyFlag never writes fp field, auditcmd mislabels successful calls as DENY
- tamper: quoted heredoc smuggles solongate CLI invocation past commandInvokesCLI
- ratelimit: Stat-then-Open race with compact() causes transient rate-limit bypass
- Docs
- Go not yet supported