vercel-labs/deepsec

View on GitHub

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

Stars: 8k
Forks: 487
Open beginner issues: 0
Indexed issues: 23
Avg merge: 8h 24m
Merged PRs (30d): 9

Dominant language: TypeScript
License: Apache-2.0
Last GitHub push: Sep 16, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

23 open issues indexed

deepsec init goes through Vercel account authentication flow even when specifying a key Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

vercel-labs/deepsec#164 · Opened Aug 24, 2026
Make workspace writes resilient to non-coherent host mounts (~2ms metadata lag) Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

vercel-labs/deepsec#159 · Opened Aug 22, 2026
Prompt to add .deepsec/ to .gitignore during init Open

Difficulty 3/5 1-2 days Newbie friendliness 64/100

vercel-labs/deepsec#156 · Opened Aug 15, 2026
Agent: Grok Build CLI Open

Difficulty 4/5 3-5 days Newbie friendliness 68/100

vercel-labs/deepsec#151 · 2 comments · 2 reactions · Opened Aug 12, 2026
metrics: Cost & Tokens table borders break on some projects Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

vercel-labs/deepsec#135 · Opened Aug 1, 2026
triage: unparseable model output is swallowed, dropping a whole batch's triage while reporting success Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

vercel-labs/deepsec#120 · Opened Jul 20, 2026
triage: verdicts correlated to findings by non-unique title, mis-attributing and dropping triage Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

vercel-labs/deepsec#118 · Opened Jul 20, 2026
Feature: add a fail-closed secure read-only execution profile Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

vercel-labs/deepsec#116 · Opened Jul 19, 2026
Add flag to configure reasoning effort Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 68/100

vercel-labs/deepsec#98 · 1 reaction · Opened Jun 27, 2026
Claude/Fable policy refusal is parsed as JSON findings output Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

vercel-labs/deepsec#92 · 1 reaction · Opened Jun 10, 2026
process/revalidate batches fail with zero retries when the agent output does not parse (parse step is outside the retry loop) Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

vercel-labs/deepsec#91 · Opened Jun 8, 2026
Matcher coverage: Falcon + async-grpc Ruby services (no web framework gate fires) Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

vercel-labs/deepsec#87 · Opened May 29, 2026
Support for Cursor CLI/Cursor SDK ? (Composer 2.5 model) Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

vercel-labs/deepsec#80 · 2 comments · 4 reactions · Opened May 21, 2026
triage field missing from both `--format json` and `--format md-dir` exports Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 70/100

vercel-labs/deepsec#64 · 1 reaction · Opened May 7, 2026
"Invalid bearer token" when using Anthropic direct Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

vercel-labs/deepsec#55 · 3 comments · Opened May 6, 2026
tests failing on Mac Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

vercel-labs/deepsec#51 · Opened May 5, 2026
`SEVERITY_ORDER` drifts across the codebase Open

Difficulty 4/5 3-5 days Newbie friendliness 64/100

vercel-labs/deepsec#48 · Opened May 5, 2026
Add SARIF export format for industry-standard SAST integration Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 52/100

vercel-labs/deepsec#40 · 3 reactions · Opened May 5, 2026
Config `matchers.exclude` does not work (matcher e.g. `xss` not excluded during scan) Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 63/100

vercel-labs/deepsec#36 · 1 comment · Opened May 5, 2026
Unknown --matchers slugs are silently ignored Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

vercel-labs/deepsec#34 · Opened May 5, 2026
Handle rate limits better Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

vercel-labs/deepsec#33 · 3 comments · 5 reactions · Opened May 5, 2026
Codex Quota Exceeded / using API_KEY instead of Codex Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 52/100

vercel-labs/deepsec#32 · 4 comments · Opened May 5, 2026
Agent: GitHub Copilot Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

vercel-labs/deepsec#21 · 4 comments · 7 reactions · Opened May 4, 2026

vercel-labs/deepsec

Get new issues in your inbox