Skip to main content

​
Copy-paste setups

​
Monitor package behavior in CI

# .github/workflows/security.yml
name: Security Check
on: [push, pull_request]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: garnet-ai/garnet-action@v1
        with:
          token: ${{ secrets.GARNET_TOKEN }}
          fail_on_critical: true
      - run: npm install
      - run: npm test
Result: See if any package makes unexpected network calls during install or tests.

​
Restrict network in prod K8s

# garnet-policy.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: garnet-policy
  namespace: garnet
data:
  policy.yaml: |
    - name: "Block all except my API"
      type: network
      action: block
      pattern: "*"
    - name: "Allow my API domains"
      type: network
      action: allow
      pattern: "api.mycompany.com"
Apply: kubectl apply -f garnet-policy.yaml

​
Monitor LLM agent runtime

Run your AI agent in CI or K8s with Garnet installed. See every:
  • Shell command executed
  • API called
  • File read/written
No code changes needed—just deploy Garnet agent first.