Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/stacklok/codegate
CodeGate: CodeGen Privacy and Security
https://github.com/stacklok/codegate
ai ai-gateway aisecurity artificial-intelligence claude cline codegen copilot developer-productivity developer-tools generative-ai ide jetbrains llm ollama openai privacy python security vscode
Last synced: 4 days ago
JSON representation
CodeGate: CodeGen Privacy and Security
- Host: GitHub
- URL: https://github.com/stacklok/codegate
- Owner: stacklok
- License: apache-2.0
- Created: 2024-11-11T12:53:47.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2025-02-14T08:54:56.000Z (5 days ago)
- Last Synced: 2025-02-14T09:22:37.158Z (5 days ago)
- Topics: ai, ai-gateway, aisecurity, artificial-intelligence, claude, cline, codegen, copilot, developer-productivity, developer-tools, generative-ai, ide, jetbrains, llm, ollama, openai, privacy, python, security, vscode
- Language: Python
- Homepage: https://codegate.ai
- Size: 41.2 MB
- Stars: 361
- Watchers: 17
- Forks: 50
- Open Issues: 92
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
- awesome-code-ai - CodeGate - AI coding without compromise. CodeGate protects, encrypts, and keeps developers in control when using AI coding assistant tools. (AI code security)
- awesome-AI-driven-development - codegate - a local gateway that makes AI coding assistants safer. (Uncategorized / Uncategorized)
README
---
[](https://github.com/stacklok/codegate/releases)
|
[](https://github.com/stacklok/codegate/actions/workflows/run-on-push.yml)
|
[](https://opensource.org/licenses/Apache-2.0)
|
[](https://github.com/stacklok/codegate)
|
[](https://discord.gg/stacklok)
[Website](https://codegate.ai) | [Documentation](https://docs.codegate.ai) |
[YouTube](https://www.youtube.com/playlist?list=PLYBL38zBWVIhrDgKwAMjAwOYZeP-ZH64n)
| [Discord](https://discord.gg/stacklok)
---
# CodeGate: secure AI code generation
**By [Stacklok](https://stacklok.com)**
CodeGate is a **local gateway** that makes AI agents and coding assistants safer. It
ensures AI-generated recommendations adhere to best practices while safeguarding
your code's integrity and protecting your privacy. With CodeGate, you can
confidently leverage AI in your development workflow without sacrificing
security or productivity.
---
## ✨ Why choose CodeGate?
AI coding assistants are powerful, but they can inadvertently introduce risks.
CodeGate protects your development process by:
- 🔒 Preventing accidental exposure of secrets and sensitive data
- 🛡️ Ensuring AI suggestions follow secure coding practices
- ⚠️ Blocking recommendations of known malicious or deprecated libraries
- 🔍 Providing real-time security analysis of AI suggestions
---
## 🚀 Quickstart
### Prerequisites
CodeGate is distributed as a Docker container. You need a container runtime like
Docker Desktop or Docker Engine. Podman and Podman Desktop are also supported.
CodeGate works on Windows, macOS, and Linux operating systems with x86_64 and
arm64 (ARM and Apple Silicon) CPU architectures.
These instructions assume the `docker` CLI is available. If you use Podman,
replace `docker` with `podman` in all commands.
### Installation
To start CodeGate, run this simple command:
```bash
docker run --name codegate -d -p 8989:8989 -p 9090:9090 -p 8990:8990 \
--mount type=volume,src=codegate_volume,dst=/app/codegate_volume \
--restart unless-stopped ghcr.io/stacklok/codegate:latest
```
That’s it! CodeGate is now running locally.
### Get into action
Now it's time to configure your preferred AI coding assistant to use CodeGate
[See supported AI Coding Assistants and providers](#-supported-ai-coding-assistants-and-providers)
⚙️ For advanced configurations and parameter references, check out the
[CodeGate Install and Upgrade](https://docs.codegate.ai/how-to/install)
documentation.
---
## 🖥️ Dashboard
CodeGate includes a web dashboard that provides:
- A view of **security risks** detected by CodeGate
- A **history of interactions** between your AI coding assistant and your LLM
### Accessing the dashboard
Open [http://localhost:9090](http://localhost:9090) in your web browser to
access the dashboard.
To learn more, visit the
[CodeGate Dashboard documentation](https://docs.codegate.ai/how-to/dashboard).
---
## 🔐 Features
### Secrets encryption
CodeGate helps you protect sensitive information from being accidentally exposed
to AI models and third-party AI provider systems by redacting detected secrets
from your prompts using encryption.
[Learn more](https://docs.codegate.ai/features/secrets-encryption)
### Dependency risk awareness
LLMs’ knowledge cutoff date is often months or even years in the past. They
might suggest outdated, vulnerable, or non-existent packages (hallucinations),
exposing you and your users to security risks.
CodeGate scans direct, transitive, and development dependencies in your package
definition files, installation scripts, and source code imports that you supply
as context to an LLM.
[Learn more](https://docs.codegate.ai/features/dependency-risk)
### Security reviews
CodeGate performs security-centric code reviews, identifying insecure patterns
or potential vulnerabilities to help you adopt more secure coding practices.
[Learn more](https://docs.codegate.ai/features/security-reviews)
---
## 🤖 Supported AI coding assistants and providers
### [Aider](https://docs.codegate.ai/how-to/use-with-aider)
- **Local / self-managed:**
- Ollama
- **Hosted:**
- OpenAI and compatible APIs
🔥 Getting started with CodeGate and aider -
[watch on YouTube](https://www.youtube.com/watch?v=VxvEXiwEGnA)
### [Cline](https://docs.codegate.ai/how-to/use-with-cline)
- **Local / self-managed:**
- Ollama
- LM Studio
- **Hosted:**
- Anthropic
- OpenAI and compatible APIs
### [Continue](https://docs.codegate.ai/how-to/use-with-continue)
- **Local / self-managed:**
- Ollama
- llama.cpp
- vLLM
- **Hosted:**
- Anthropic
- OpenAI and compatible APIs
### [GitHub Copilot](https://docs.codegate.ai/how-to/use-with-copilot)
- The Copilot plugin works with **Visual Studio Code (VS Code)** (JetBrains is
coming soon!)
---
## 🛡️ Privacy first
Unlike other tools, with CodeGate **your code never leaves your machine**.
CodeGate is built with privacy at its core:
- 🏠 **Everything stays local**
- 🚫 **No external data collection**
- 🔐 **No calling home or telemetry**
- 💪 **Complete control over your data**
---
## 🛠️ Development
Are you a developer looking to contribute? Dive into our technical resources:
- [Development guide](https://github.com/stacklok/codegate/blob/main/docs/development.md)
- [CLI commands and flags](https://github.com/stacklok/codegate/blob/main/docs/cli.md)
- [Configuration system](https://github.com/stacklok/codegate/blob/main/docs/configuration.md)
- [Logging system](https://github.com/stacklok/codegate/blob/main/docs/logging.md)
---
## 📜 License
CodeGate is licensed under the terms specified in the
[LICENSE file](https://github.com/stacklok/codegate/blob/main/LICENSE).
---
## 🌟 Support us
Love CodeGate? Starring this repository and sharing it with others helps
CodeGate grow 🌱
[](https://github.com/stacklok/codegate)
---
## 🤝 Contributing
We welcome contributions! Whether you're submitting bug reports, feature
requests, or code contributions, your input makes CodeGate better for everyone.
We thank you ❤️!
Start by reading our
[Contributor guidelines](https://github.com/stacklok/codegate/blob/main/CONTRIBUTING.md).
### Thank you!
Made with [contrib.rocks](https://contrib.rocks).