Skip to content

Agent Gate

Developer Productivity

A checkout‑free GitHub Action that detects when AI agents attempt to exceed their allowed scope in pull requests.

TypeScript Latest v0.6.0 · 1d ago Security brief →

Features

  • Scans PRs for scope violations without checking out code
  • Detects workflow permission escalation and supply‑chain risks
  • Provides deterministic, replayable evidence for each finding
  • Supports configurable policy via `agent-gate.yml`

Recent releases

View all 6 releases →
Config change
v0.6.0 Breaking risk
Breaking upgrade Auth

Contract missing severity change

Config change
v0.5.1 Bug fix

Body marker fix

Config change
v0.5.0 Breaking risk
Auth Breaking upgrade

Agent detection defaults + Gemini/Qwen rules

No immediate action
v0.4.1 Breaking risk

Policy digest change + trailers + folded comment

Config change
v0.4.0 Breaking risk
Breaking upgrade

Rename + integration guides

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
12
Forks
3
Languages
TypeScript JavaScript
Downloads/week
84
NPM Maintainers
1 Single npm maintainer
Contributors
3

Install & Platforms

Install via
npm
Platforms
linux

Beta — feedback welcome: [email protected]