{"id":21185611,"url":"https://github.com/raystack/guardian","last_synced_at":"2025-07-24T22:40:33.184Z","repository":{"id":37675707,"uuid":"337579190","full_name":"raystack/guardian","owner":"raystack","description":"Guardian is universal data access management tool with automated access workflows and security controls across data stores, analytical systems, and cloud products.","archived":false,"fork":false,"pushed_at":"2024-06-13T13:20:56.000Z","size":6681,"stargazers_count":136,"open_issues_count":36,"forks_count":21,"subscribers_count":9,"default_branch":"main","last_synced_at":"2025-05-27T08:54:20.647Z","etag":null,"topics":["access","compliance","control","data","dataops"],"latest_commit_sha":null,"homepage":"https://guardian.vercel.app/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/raystack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-02-10T00:53:59.000Z","updated_at":"2024-12-14T15:36:31.000Z","dependencies_parsed_at":"2023-11-29T11:43:54.225Z","dependency_job_id":"10c9bf47-15ce-4bfb-af69-e5bbb1dd44c8","html_url":"https://github.com/raystack/guardian","commit_stats":{"total_commits":466,"total_committers":13,"mean_commits":35.84615384615385,"dds":"0.43562231759656656","last_synced_commit":"faf58070b6e8b98c5c0c7d73376b176d3af14277"},"previous_names":["raystack/guardian","odpf/guardian"],"tags_count":63,"template":false,"template_full_name":null,"purl":"pkg:github/raystack/guardian","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raystack%2Fguardian","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raystack%2Fguardian/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raystack%2Fguardian/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raystack%2Fguardian/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/raystack","download_url":"https://codeload.github.com/raystack/guardian/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/raystack%2Fguardian/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":266914557,"owners_count":24005594,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-24T02:00:09.469Z","response_time":99,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["access","compliance","control","data","dataops"],"created_at":"2024-11-20T18:17:29.033Z","updated_at":"2025-07-24T22:40:33.129Z","avatar_url":"https://github.com/raystack.png","language":"Go","readme":"# Guardian\n\n![test workflow](https://github.com/raystack/guardian/actions/workflows/test.yaml/badge.svg)\n![release workflow](https://github.com/raystack/guardian/actions/workflows/release.yaml/badge.svg)\n[![Coverage Status](https://coveralls.io/repos/github/raystack/guardian/badge.svg?branch=main)](https://coveralls.io/github/raystack/guardian?branch=main)\n[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg?logo=apache)](LICENSE)\n[![Version](https://img.shields.io/github/v/release/raystack/guardian?logo=semantic-release)](Version)\n\nGuardian is a tool for extensible and universal data access with automated access workflows and security controls across data stores, analytical systems, and cloud products.\n\n\u003cp align=\"center\"\u003e\u003cimg src=\"./docs/static/assets/overview.svg\" /\u003e\u003c/p\u003e\n\n## Key Features\n\n- **Provider management**: Support various providers (currently only BigQuery, more coming up!) and multiple instances for each provider type\n- **Resource management**: Resources from a provider are managed in Guardian's database. There is also an API to update resource's metadata to add additional information.\n- **Appeal-based access**: Users are expected to create an appeal for accessing data from registered providers. The appeal will get reviewed by the configured approvers before it gives the access to the user.\n- **Configurable approval flow**: Approval flow configures what are needed for an appeal to get approved and who are eligible to approve/reject. It can be configured and linked to a provider so that every appeal created to their resources will follow the procedure in order to get approved.\n- **External identity managers**: This gives the flexibility to use any third-party identity manager. User properties.\n\n## Documentation\n\nExplore the following resoruces to get started with Guardian:\n\n- [Guides](https://guardian.vercel.app/docs/tour/introduction) provides guidance on usage.\n- [Concepts](https://guardian.vercel.app/docs/concepts/overview) describes all important Guardian concepts including system architecture.\n- [Reference](https://guardian.vercel.app/docs/reference/api) contains details about configurations and other aspects of Guardian.\n- [Contribute](https://guardian.vercel.app/docs/contribute/contribution) contains resources for anyone who wants to contribute to Guardian.\n\n## Installation\n\nInstall Guardian on macOS, Windows, Linux, OpenBSD, FreeBSD, and on any machine. \u003cbr/\u003eRefer this for [installations](https://guardian.vercel.app/docs/installation) and [configurations](https://guardian.vercel.app/docs/tour/configuration)\n\n#### Binary (Cross-platform)\n\nDownload the appropriate version for your platform from [releases](https://github.com/raystack/guardian/releases) page. Once downloaded, the binary can be run from anywhere.\nYou don’t need to install it into a global location. This works well for shared hosts and other systems where you don’t have a privileged account.\nIdeally, you should install it somewhere in your PATH for easy use. `/usr/local/bin` is the most probable location.\n\n#### macOS\n\n`guardian` is available via a Homebrew Tap, and as downloadable binary from the [releases](https://github.com/raystack/guardian/releases/latest) page:\n\n```sh\nbrew install raystack/tap/guardian\n```\n\nTo upgrade to the latest version:\n\n```\nbrew upgrade guardian\n```\n\n#### Linux\n\n`guardian` is available as downloadable binaries from the [releases](https://github.com/raystack/guardian/releases/latest) page. Download the `.deb` or `.rpm` from the releases page and install with `sudo dpkg -i` and `sudo rpm -i` respectively.\n\n#### Windows\n\n`guardian` is available via [scoop](https://scoop.sh/), and as a downloadable binary from the [releases](https://github.com/raystack/guardian/releases/latest) page:\n\n```\nscoop bucket add guardian https://github.com/raystack/scoop-bucket.git\n```\n\nTo upgrade to the latest version:\n\n```\nscoop update guardian\n```\n\n#### Docker\n\nWe provide ready to use Docker container images. To pull the latest image:\n\n```\ndocker pull raystack/guardian:latest\n```\n\nTo pull a specific version:\n\n```\ndocker pull raystack/guardian:v0.8.0\n```\n\n## Usage\n\nGuardian is purely API-driven. It is very easy to get started with Guardian. It provides CLI, HTTP and GRPC APIs for simpler developer experience.\n\n#### CLI\n\nGuardian CLI is fully featured and simple to use, even for those who have very limited experience working from the command line. Run `guardian --help` to see list of all available commands and instructions to use.\n\nList of commands\n\n```\nguardian --help\n```\n\nPrint command reference\n\n```sh\nguardian reference\n```\n\n#### API\n\nGuardian provides a fully-featured GRPC and HTTP API to interact with Guardian server. Both APIs adheres to a set of standards that are rigidly followed. Please refer to [proton](https://github.com/raystack/proton/tree/main/raystack/guardian/v1beta1) for GRPC API definitions.\n\n## Contribute\n\nDevelopment of Guardian happens in the open on GitHub, and we are grateful to the community for contributing bugfixes and\nimprovements. Read our [contributing guide](https://guardian.vercel.app/docs/contribute/contribution) to learn about our development process, how to propose\nbugfixes and improvements, and how to build and test your changes to Guardian.\n\nTo help you get your feet wet and get you familiar with our contribution process, we have a list of\n[good first issues](https://github.com/raystack/guardian/labels/good%20first%20issue) that contain bugs which have a relatively\nlimited scope. This is a great place to get started.\n\nThis project exists thanks to all the [contributors](https://github.com/raystack/guardian/graphs/contributors).\n\n## License\n\nGuardian is [Apache 2.0](LICENSE) licensed.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fraystack%2Fguardian","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fraystack%2Fguardian","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fraystack%2Fguardian/lists"}