solongate / agent-security
Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
- Stars
- 664 stars
- Forks
- 104 forks
- Language
- Go
- License
- APACHE-2.0
- Created
- Sep 27, 2026
- Last push
- Nov 10, 2026
- Updated
- Nov 10, 2026
Why these Tags: an agent read the README and quoted it
- LLM guardrails from the readme:
It checks tool calls against your policies before they run, with secret detection, rate limits and a local audit trail.
- Coding agent plugin from the readme:
Hooks load when a session starts, so an already open one is not guarded yet.
- Agent sandbox from the readme:
The agent's whole root is a new, minimal filesystem holding only the project; everything else is not refused, it is not there.
An agent gave these Tags from the fixed Tag list in the AwesomeRepos source code. A code check kept each Tag only when its quote is in the text. A wrong Tag? Report an error with the form at the end of this page.
Admitted to the Repository Index on Nov 8, 2026: +319 stars in 7 days.
Star History
36 days recorded, Oct 6, 2026 – Nov 10, 2026 (UTC). Net change +664 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour.
Add ?theme=light or ?theme=dark
to the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/solongate/agent-security) Badge
[](https://awesomerepos.com/solongate/agent-security) Timeline
It gained stars on 23 of the 36 days recorded since Oct 6, 2026.
Its largest 7 days were Nov 4, 2026 to Nov 10, 2026: 540 stars.
- Created on the Repository Host
- Release v0.0.5
- Release v0.0.6
- Release v0.0.7
- Reached 100 stars, 36 days after it was created
- Largest star day recorded: +226 stars
- +144 stars in one day
- Entered the Repository Index: +319 stars in 7 days
- Reached 500 stars, 42 days after it was created
- +107 stars in one day
- Latest push
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 3 Observations, Nov 9, 2026 – Nov 11, 2026. Forks +66. AwesomeRepos saw a new push on 1 of 2 days.
- Nov 10, 2026: no new push
- Nov 11, 2026: new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos last read these facts from GitHub on Nov 10, 2026. How AwesomeRepos defines each check
Maintenance
3 of 4 checks-
Yes: Not archived
GitHub does not mark the repository as archived. Source
-
Yes: A push in the last 90 days
Last push on 2026-11-10, 0 days ago. Source
-
Yes: Commits in the last 13 weeks
495 commits on the default branch in the last 13 weeks (GitHub, 2026-11-10). Source
-
No: Commits in 26 or more of the last 52 weeks
Commits in 7 of the last 52 weeks (GitHub, 2026-11-10). Source
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 38
- 74
- 82
- 72
- 46
- 137
- 46
Releases
3 of 3 checks-
Yes: A release in the last 365 days
Newest release v0.0.7 on 2026-10-14, 27 days ago. 3 releases in the last 365 days. Source
-
Yes: The newest release tag is a semantic version
The newest release tag is v0.0.7. Source
-
Yes: A changelog file at the root
CHANGELOG.md at the root (GitHub, 2026-11-10). Source
Security practice
1 of 1 check-
Yes: A security policy
GitHub finds a security policy (GitHub, 2026-11-10). Source
OpenSSF Scorecard: 18 checks on Nov 8, 2026
Each check has its own score, from 0 to 10. AwesomeRepos does not show the Scorecard aggregate score, and these checks are not in the count above. Source
- Binary-Artifacts
- 10 of 10
- Branch-Protection
- 8 of 10
- CI-Tests
- 10 of 10
- CII-Best-Practices
- 10 of 10
- Code-Review
- 6 of 10
- Contributors
- 3 of 10
- Dangerous-Workflow
- 10 of 10
- Dependency-Update-Tool
- 10 of 10
- Fuzzing
- 10 of 10
- License
- 10 of 10
- Maintained
- 0 of 10
- Packaging
- No result
- Pinned-Dependencies
- 10 of 10
- SAST
- 10 of 10
- Security-Policy
- 10 of 10
- Signed-Releases
- 10 of 10
- Token-Permissions
- 10 of 10
- Vulnerabilities
- 9 of 10
Community files
3 of 3 checksDependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
The GitHub dependency graph of this repository names 26 direct packages (scanned on Nov 10, 2026). Packages from 5 other repositories in the index are among them.
No scanned repository names a package from this repository.
Uses (in the index) · 5
-
Go: github.com/charmbracelet/bubbletea
-
Go: github.com/open-policy-agent/opa
-
Go: github.com/charmbracelet/lipgloss
-
Go: github.com/charmbracelet/bubbles
- mattn/go-isatty 928
Go: github.com/mattn/go-isatty
Used by (in the index) · 0
None.
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package (checked on Nov 3, 2026). A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 11, 2026: 664 stars, 104 forks, last push Nov 10, 2026, not archived. One of 3 Observations since Nov 9, 2026.