Skip to content

Commit 4122c16

Browse files
committed
Update README with CoSAI donation notice
Project CodeGuard has been donated to the Coalition for Secure AI (CoSAI). Replace README content with notice directing users to the new repository at github.com/cosai-oasis/project-codeguard for updates and contributions.
1 parent 2192021 commit 4122c16

File tree

1 file changed

+4
-97
lines changed

1 file changed

+4
-97
lines changed

README.md

Lines changed: 4 additions & 97 deletions
Original file line numberDiff line numberDiff line change
@@ -1,101 +1,8 @@
1-
# Project CodeGuard: Security Skills and Rules for AI Coding Agents
2-
![Securing](https://img.shields.io/badge/Securing%20AI%20Generated%20Code-green)
3-
![Open Source](https://img.shields.io/badge/Now-Open%20Source-brightgreen)
4-
[![License: CC BY 4.0](https://img.shields.io/badge/License-CC%20BY%204.0-lightgrey.svg)](https://creativecommons.org/licenses/by/4.0/)
1+
## Project CodeGuard has been donated to the Coalition for Secure AI (CoSAI)!
52

6-
This project is an AI model-agnostic security framework and ruleset (internally nicknamed "Project CodeGuard" when developed at Cisco) that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, translators for popular coding agents, and validators to test rule compliance.
3+
This project is now maintained by the Coalition for Secure AI (CoSAI).
74

5+
**➡️ New Repository: [github.com/cosai-oasis/project-codeguard](https://github.com/cosai-oasis/project-codeguard)**
86

9-
## Why Project CodeGuard?
107

11-
AI coding agents are transforming software engineering, but this speed can introduce security vulnerabilities. Is your AI coding agent implementation introducing security vulnerabilities?
12-
13-
- Skipping input validation
14-
- Hardcoding secrets and credentials
15-
- Using weak cryptographic algorithms
16-
- Relying on unsafe functions
17-
- Missing authentication/authorization checks
18-
- Missing any other security best practice
19-
20-
Project CodeGuard solves this by embedding security best practices directly into AI coding agent workflows.
21-
22-
**During and After Code Generation.**
23-
24-
Project CodeGuard is designed to integrate seamlessly across the entire AI coding lifecycle.
25-
- **Before code generation**, skills and rules can be used for the design of a product and for spec-driven development. You can use the rules in the “planning phase” of an AI coding agent to steer models toward secure patterns from the start.
26-
- **During code generation**, skills and rules can help AI agents to prevent security issues as code is being written.
27-
- **After code generation**, AI agents like Cursor, GitHub Copilot, Codex, Windsurf, and Claude Code can use the rules for code review.
28-
29-
30-
## Security Coverage
31-
32-
Project CodeGuard skills and rules cover essential security domains:
33-
34-
- **Cryptography**: Safe algorithms (including post-quantum cryptography), secure key management, certificate validation
35-
- **Input Validation**: SQL injection prevention, XSS protection, command injection defense
36-
- **Authentication**: MFA best practices, OAuth/OIDC, secure session management
37-
- **Authorization**: RBAC/ABAC, access control, IDOR prevention
38-
- **Supply Chain**: Dependency security, SBOM generation, vulnerability management
39-
- **Cloud Security**: IaC hardening, container security, Kubernetes best practices
40-
- **Platform Security**: Mobile apps, web services, API security
41-
- **Data Protection**: Privacy, encryption at rest/transit, secure storage
42-
43-
## Quick Start
44-
45-
Get started in minutes:
46-
47-
1. **Download the skills and rules** from our [releases page](https://github.com/project-codeguard/rules/releases)
48-
2. **Copy to your project** - Place AI agent and IDE specific skills and rules in your repository
49-
3. **Start coding** - AI assistants will automatically follow security best practices
50-
51-
- Additional details in the [Get Started →](https://project-codeguard.org/getting-started/)
52-
53-
54-
## How It Works
55-
56-
1. **Security skills and rules** are written in unified markdown format (`sources/` directory)
57-
2. **Conversion tools** translate skills and rules to IDE-specific formats (Cursor, Windsurf, Copilot, Agent Skills, Antigravity)
58-
3. **Release automation** packages skills and rules into downloadable ZIP files
59-
4. **AI assistants** reference these skills and rules when generating or reviewing code
60-
5. **Secure code** is produced automatically without developer intervention
61-
62-
## Repository Structure
63-
64-
```
65-
sources/ # Source rules
66-
skills/ # Agent Skills format (generated, committed)
67-
src/ # Conversion and validation tools
68-
dist/ # Other IDE bundles (generated, not committed)
69-
```
70-
71-
## For Developers
72-
73-
```bash
74-
git clone https://github.com/project-codeguard/rules.git && cd rules
75-
uv sync
76-
python src/validate_unified_rules.py sources/ # Validate rules
77-
python src/convert_to_ide_formats.py # Generate skills/ and dist/
78-
```
79-
80-
**More options**: `python src/convert_to_ide_formats.py --help`
81-
**Custom rules**: Create your own rules — see [Custom Rules](https://project-codeguard.org/custom-rules/)
82-
**Maintainers**: See [CONTRIBUTING.md](CONTRIBUTING.md) for release process.
83-
84-
## Community
85-
86-
- **📋 Issues**: [Report bugs or request features](https://github.com/project-codeguard/rules/issues)
87-
- **💬 Discussions**: [Join the conversation](https://github.com/project-codeguard/rules/discussions)
88-
- **🤝 Contributing**: [Learn how to contribute](https://github.com/project-codeguard/rules/blob/main/CONTRIBUTING.md)
89-
90-
91-
## Licensing
92-
93-
This project uses dual licensing:
94-
95-
- **Security Rules & Documentation**: Licensed under [Creative Commons Attribution 4.0 International (CC BY 4.0)](https://creativecommons.org/licenses/by/4.0/) - includes all rule files, documentation, and project content
96-
- **Source Code & Tools**: The `src/` directory is licensed under [Apache License 2.0](src/LICENSE.md) - includes conversion tools, validators, and other software components
97-
98-
This licensing approach ensures the security rules remain freely accessible and reusable while providing appropriate terms for software components.
99-
100-
101-
Copyright © 2026 Cisco Systems, Inc.
8+
Please visit the new repository for the latest updates and how to contribute to the project.

0 commit comments

Comments
 (0)