asamassekou10/ship-safe

Language-scope RAGSecurityAgent's rules 13 days ago

enhancement help wanted good first issue tests cli agents

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Give rules a language scope so JS patterns stop running against Python and Ruby 14 days ago

enhancement help wanted good first issue tests cli agents hermes

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

[FEATURE] Add a truthful Protected by Ship Safe session indicator 14 days ago

enhancement help wanted cli docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

[FEATURE] Add machine-readable protection status for agent integrations 14 days ago

enhancement help wanted good first issue cli docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Scan A2A agent cards for poisoning, missing auth, and callback SSRF 14 days ago

help wanted good first issue agent security rule tests cli agents hermes

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Capability graph: add repository-origin and A2A-delegation nodes 14 days ago

help wanted cli

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Baseline drift: reviewable workflow for tracking upstream Hermes releases 14 days ago

help wanted docs hermes

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Pinned advisory table: map agent versions to documented execution sinks 14 days ago

help wanted security rule docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Workspace trust: detect repo-borne execution sinks before an agent opens the folder 14 days ago

help wanted agent security rule tests cli

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Ship Safe 11.0 — Untrusted Inputs 14 days ago

help wanted security rule cli

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Ship Safe 10.0 — Hermes Agent coverage (help wanted) 14 days ago

help wanted cli agents hermes

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Language-scope APIFuzzer's rules 29 days ago

enhancement help wanted good first issue tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Detect MCP OAuth token passthrough and confused deputy proxy configs 29 days ago

help wanted good first issue security rule cli agents hermes

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Absence-rule lookaheads: one confirmed false positive, several fragile about 1 month ago

bug help wanted tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

[RESEARCH] Explore Codex session integration boundaries about 1 month ago

enhancement help wanted cli docs needs-maintainer

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

[DESIGN] Define a verified protection status for Ship Safe Cloud about 1 month ago

enhancement help wanted cloud-private needs-maintainer

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add GitLab CI security gate example about 1 month ago

documentation help wanted good first issue cli docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Hermes plugin manifest rules (plugin.yaml) about 2 months ago

help wanted security rule cli agents hermes

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Document MCP allowlist bypass findings and safe config examples about 2 months ago

documentation help wanted good first issue cli docs agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add npm provenance and trusted publishing checks for release workflows about 2 months ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Flag unsafe AI model downloads and unpinned Hugging Face usage about 2 months ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Detect suspicious Python package install hooks about 2 months ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Detect connection-string env passthrough in MCP configs about 2 months ago

help wanted good first issue agent security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Detect unpinned AI GitHub Actions with broad permissions about 2 months ago

help wanted good first issue security rule cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Improve Supabase and Auth0 secret patterns about 2 months ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add regression fixture for MCP connection-string passthrough about 2 months ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add agent config injection regression fixtures about 2 months ago

help wanted good first issue agent tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add MCP tool-call allowlist bypass fixtures about 2 months ago

help wanted good first issue security rule tests cli agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Document safe MCP env handling examples about 2 months ago

documentation help wanted good first issue cli docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Document project-local custom agent plugins about 2 months ago

documentation help wanted good first issue agent cli docs agents

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Document GitHub Actions release and npm publish flow about 2 months ago

documentation help wanted good first issue cli docs

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add CLI smoke test for packaged npx usage about 2 months ago

help wanted good first issue tests cli

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add changelog note for MCP and Kimi K3 rule coverage about 2 months ago

documentation help wanted good first issue

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Improve dashboard empty states for first-time users about 2 months ago

help wanted good first issue webapp

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add Kimi K3 tool-call security fixtures about 2 months ago

help wanted good first issue agent tests

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Add MCP env secret passthrough detection about 2 months ago

help wanted good first issue agent security rule

asamassekou10/ship-safe

766

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

JavaScript

#cli#devscops#npm#owasp#secrets#security#security-tools#static-analysis

Open Issues Need Help