codex-guard

项目详情摘要

🤖 Codex Guard Docs site:** An automatic quality gate for AI-generated pull requests.** Stop TODO leftovers, leaked secrets, sloppy commits and red CI from reaching `main` — with zero review bandwidth spent on the obvious stuff. Works with **OpenAI Codex** (cloud & CLI), **Claude Code**, **Copilot**, and any other agent that opens PRs against your repo. 🐕 **Dogfooding:** this repo gates its own AI-generated PRs. See a real failing example on PR #6 and the workflow behind it in `.github/workflows/codex-guard.yml`. Why AI coding agents are great at writing code and terrible at cleaning up after themselves. In practice, agent-written PRs tend to arrive with the same handful of problems: `// TODO: handle this` comments that were never meant to stay Hardcoded API keys and connection strings copied from a chat transcript Commit trails like `WIP`, `fix stuff`, `more changes` — squashed versions of a messy session A green-looking PR that actually has failing CI on the head commit You shouldn't need a human reviewer to catch those every single time. **Codex Guard checks the boring, deterministic things automatically, and only on PRs that look AI-generated** — so human attention goes where it matters. How it works Codex Guard runs on `pull_request`, figures out whether the PR looks agent-generated (via label, branch prefix, or title), and then: Check | What it flags | --- | --- | 🧹 TODO scan | `TODO` / `FIXME` / `XXX` / `HACK` / `WIP` markers on **added lines only** | 🔐 Secret scan | AWS (access + secret keys), GitHub, Google, OpenAI, Anthropic, Slack, Stripe, npm, SendGrid, Telegram, Azure connection strings, JWTs, hardcoded credentials, connection strings (values are redacted in reports) | 💬 Commit hygiene | Subjects that don't match conventional commits, empty subjects | 🧪 CI s