gitguard_anbu
🛡️ GitGuard — Autonomous Multi-Agent GitHub Security & Quality Guardrails
💡 Project Overview
GitGuard is an autonomous, multi-agent developer security platform that protects software repositories from leaked secrets, OWASP vulnerabilities, subtle logic defects, and performance regressions. Operating as a native GitHub App, GitGuard inspects every git push and Pull Request with sub-second parallel AI agents, providing automated consensus arbitration and 1-Click Git remediation.
🔌 Seamless Native GitHub App Integration
GitGuard installs directly into any personal account or enterprise organization with a single click. It connects to GitHub's event bus via webhooks to automatically monitor pushes, manage commit statuses, and post line-by-line Check Run annotations without interrupting local developer workflows.
📊 Continuous Multi-Agent Repository Health Dashboard
Every repository monitored by GitGuard receives a dynamic 30-day health scorecard and composite score (0–100, Pristine A+). Development leads can track pull request pass rates, prevented credentials, security blockers, and individual agent performance trends at a glance.
⚙️ Autonomous Policy Enforcement & Multi-Agent Debate Mode
Teams have granular control over how and when guardrails trigger. GitGuard features a groundbreaking Multi-Agent Debate Mode: when specialized agents disagree on severity, an automated cross-examination round evaluates real-world exploitability to eliminate false positives before posting blocking verdicts.
🎛️ Customizable Agent Pipeline & Severity Merge Gates
Engineering leaders can customize which agents are mandatory versus optional for their organization:
- SecretAgent: Zero-tolerance credential interception (OpenAI keys, AWS secrets, GitHub PATs).
- BugAgent: AST-aware analysis catching unhandled null dereferences and race conditions.
- SecurityAgent: OWASP Top 10 SAST engine scanning SQLi, SSRF, and command injections.
- CommitAgent: Enforces Conventional Commits standards and semantic versioning.
- SEOAgent & HealthAgent: Audits Core Web Vitals and computes repo health rubrics.
Teams can configure blocking thresholds (e.g., block only on HIGH/CRITICAL) and set minimum health scores required to pass pull requests.
⚡ Live Commit Stream & 1-Click Auto-Solve Remediation
GitGuard doesn't just block broken code—it fixes it. When a vulnerability or bug is detected, the 1-Click Auto-Solve Engine generates the minimal required patch, commits the remediation directly to a new branch, and opens an auto-remediation PR on GitHub, marked with an Auto-Solved badge in the audit ledger.
🏗️ Technical Architecture
- Multi-Agent Orchestration: LangGraph state graph coordinating parallel specialist agents with consensus arbitration.
- Ultra-Fast LLM Inference: Groq LPU (
openai/gpt-oss-120b,qwen-2.5-coder-32b) delivering sub-second analysis, backed by Google Gemini 1.5 Flash fallback. - Zero-Token Fast Path: Clean commits bypass LLMs deterministically, saving API costs and slashing queue latency.
- Distributed Queue & Ingestion: Next.js 14 App Router, BullMQ, and Upstash Redis for resilient background webhook processing.
- Persistence & Real-Time Sync: Google Firebase Admin & Firestore for immutable audit logs, team policies, and health rubrics.
- Instant Alerts: Automated Slack webhook notifications and Nodemailer security dispatches.
🏆 Why GitGuard Stands Out
Traditional CI scanners are slow, noisy, and burden developers with manual remediation tickets. GitGuard replaces reactive scanning with an autonomous, proactive shield that catches vulnerabilities at commit time, arbitrates consensus through multi-agent debate, and fixes the code automatically.