.svg)
Block security violations before commit and in CI.
Automatically check agent and developer changes, stop live secrets at commit, and fail builds on configured violations. Trigger remediation and produce security artifacts from your existing pipelines.
Security checks, enforcement and automation.
Apply security checks where changes are made and built, then automate the follow-up work.
Blocking checks for agents, commits and CI
- Stop live secretsProvider-checked, no Heeler loginsecrets
- Block vulnerable and malicious packagesFix version and exploit signalsvulnerabilities · detect-malicious-packages
- Hold license and package-age policyDenied licenses, too-new versionsdependency-policy
- Catch code and IaC flawsCode, Dockerfiles and IaCsast
- Score agent filesPrompt injection and exfiltrationscan-agent-file
Dependency recommendations and CI gates
- Pick the safe version firstClean and within policyget-recommended-version
- Gate CI in one commandOne SBOM · JSON, SARIF or agent-ready outputci
- Fail only on new findingsOld debt doesn't blockpolicy set-baseline
Run Heeler headlessly
- Trigger a fixPR now, or on approvalfix
- Pull and assess SBOMsAny service or CycloneDX filedownload-sbom · assess-sbom
- Build a threat-model promptContext for a coding agentthreat-model prompt
- Test policy before it gatesSee what would failpolicy test
Automatically guide coding agents and check their changes.
Heeler supplies applicable standards, guardrails and PII-handling requirements automatically. Hooks check supported actions and return findings to the agent while it can still correct the change.
Agent proposes a changeHeeler checks the actionBlock new violations without blocking on existing vulnerability debt.
Fail builds on configured security violations. Baseline existing vulnerability findings so newly introduced risk blocks the build while prior findings remain visible.
heelercli ciEvaluate new findingsTrigger fixes and produce security artifacts automatically.
Start remediation, export or assess SBOMs, and generate threat-model prompts from existing scripts and pipelines. Use approval workflows where a person needs to review the action.
heelercli fix 4812,4813 --separate-prsEnforcement in coding agents, Git and CI.
Agent Hooks check supported actions before execution. The CLI also checks commits and builds, and supplies scans through Agent Skills.
Security checks and automation for agents and pipelines.
