ConfigGuardian
ConfigGuardian is an AI-powered configuration security agent that analyzes raw configuration files or even screenshots like Kubernetes YAMLs or Dockerfiles to automatically detect misconfigurations and propose secure fix
Core trick
Gemini reads config text or screenshots, flags risky settings, emits diff patches, and hashes each scan result into a provenance record.
Description
ConfigGuardian is an AI-powered configuration security agent that analyzes raw configuration files or even screenshots like Kubernetes YAMLs or Dockerfiles to automatically detect misconfigurations and propose secure fixes.
Using Google’s multimodal Gemini models, ConfigGuardian can parse text or extract it directly from images, reason about risky settings such as running as root, unpinned images, or exposed ports, and then generate secure auto-fix code diffs.
Finally, it produces a cryptographic provenance record anchored via a Fetch.ai agent, providing tamper-proof, verifiable audit trails for every scan.
In short, ConfigGuardian turns raw or visual configuration data into AI-audited, auto-fixed, and verifiably trustworthy security insights — bridging the gap between developer convenience and compliance-grade integrity.
README excerpt
# ConfigGuardian **AI-powered security auditor for infrastructure configuration files.** ConfigGuardian helps engineers and platform teams catch security and reliability problems in their configuration files *before* they ship to production. A user pastes a config file (or uploads a screenshot of one), and the system returns a prioritized list of security findings, a one-click "autofix" patch, a downloadable executive-style security report, and a tamper-evident provenance receipt. --- ## What problem does it solve? DevOps and platform engineers maintain dozens of small but high-risk files: Dockerfiles, Kubernetes manifests, `.env` files, Nginx configs, IAM policies. Misconfigurations in these files are a leading cause of cloud security incidents (exposed secrets, root containers, unpinned images, missing resource limits, etc.). Today, catching these issues typically requires either: - A senior security engineer doing a manual review (slow, expensive, doesn't scale), or - A patchwork of static-analysis CLIs (noisy, hard to triage, no fixes attached). ConfigGuardian replaces that with a single guided workflow: 1. **Paste or upload** a config file. 2. **AI analysis** returns a deduplicated, severity-ranked list of issues with line numbers, evidence, rationale, and recommendations. 3. **One-click autofix** generates a minimal, production-safe patch shown as a side-by-side diff. 4. **One-click report** generates a polished Markdown security report suitable for leadership