agent-security
https://github.com/solongate/agent-security
Go
Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported1 Subscribers
Add a CodeTriage badge to agent-security
Help out
- Issues
- sandbox (linux): RuntimeWrite directories get implicit execute rights via landlock RWDirs/RWFiles
- sandbox (linux): nested or overlapping deny paths lose protection in allowRules
- policy: ReadReferencedFiles' interpreter match misses path-qualified binaries
- argsInvokeCLI misses CLI invocations hidden under unlisted or nested fields
- DLP egress check never scans bare host netcat exfiltration commands
- User configured protected paths are not resolved through symlinks
- Rate limit observe counter has a read modify write race
- Windows sandbox confirms confinement only after the agent already finished running
- DefaultRuntimeWrite takes a home directory parameter it never uses
- solongate update skips the human only terminal gate
- Docs
- Go not yet supported