{"slug": "bagel-is-a-cross-platform-cli-that-inspects-developer-workstations", "title": "Bagel is a cross‑platform CLI that inspects developer workstations", "summary": "BoostSecurity released Bagel, a cross-platform command-line tool that scans developer workstations on macOS, Linux and Windows and outputs a JSON report of dev tool configurations and secret locations, recording only metadata and never secret values. Bagel runs 9 probes (Git, SSH, npm, environment variables, shell history, AWS/GCP/Azure cloud credentials, JetBrains IDEs, GitHub CLI and AI CLI tools) and 8 secret detectors, flags risky settings such as http.sslVerify=false and ForwardAgent yes, and supports a --strict flag for enforcing baseline posture checks in CI. The tool is read-only, local-first and installable via Homebrew, release tarballs or a Go 1.25 build, with an enterprise version offered as BoostSecurity Developer Endpoint Protection.", "body_md": "Inventory what matters on developer machines—tools, configs, and **metadata about secrets**—to improve org supply‑chain security without exfiltrating payloads.\n\nBagel is a cross‑platform CLI that inspects developer workstations (macOS, Linux, Windows) and produces a structured report of:\n\n- **Dev tool configurations and risky settings** across 9 probes: Git, SSH, npm, environment variables, shell history, cloud credentials (AWS/GCP/Azure), JetBrains IDEs, GitHub CLI, and AI CLI tools.\n- **Secret locations (metadata only)** : presence of tokens, keys, and credentials in config files, env vars, and history—detected by 8 secret detectors—**never the secret values** .\n\nFor detailed documentation on each probe and detector, see the [Bagel docs site](https://boostsecurityio.github.io/bagel/).\n\n**Looking for more?** If you want a more powerful, enterprise-grade version with the ability to deploy at scale and collect posture information across your entire developer laptop fleet, have a look at the [BoostSecurity Developer Endpoint Protection (DEP) product](https://boostsecurity.io/solution/developer-endpoint).\n\n- **No payloads. Ever.** Bagel records only metadata (path, owner, perms, timestamps, config flags, key type/length/expiry). Secret values are never included in output or written to disk.\n- **Local‑first.** Reports are printed to stdout as JSON by default.\n- **Minimally intrusive.** Read‑only operations; no process injection; no network scanners.\n- **Transparent.** Every probe is documented and can be toggled via configuration.\n\nModern supply‑chain risk often lands on developer endpoints (malicious packages, misconfig creds, weak key hygiene). Bagel standardizes visibility so security teams can:\n\n- Find high‑signal misconfigs (e.g., `http.sslVerify=false` ,`ForwardAgent yes` , plaintext creds files, unencrypted SSH keys).\n- Detect leaked secrets in shell history, `.env` files, and config files.\n- Enforce baseline posture checks in CI with `--strict` .\n\n- **Git** :`credential.helper=store` ,`http.sslVerify=false` , custom`core.sshCommand` with non‑standard binaries, dangerous protocols, fsck disabled.\n- **npm** : tokens in`.npmrc` ,`strict-ssl=false` , HTTP (non‑HTTPS) registries.\n- **SSH** : keys without passphrase,`ForwardAgent yes` ,`StrictHostKeyChecking=no` , permissive file modes.\n- **Environment & history** : secrets embedded in env vars,`.env` files, or shell command history.\n- **Cloud** : AWS credentials, GCP API keys, Azure storage keys in config files.\n\nDownload the latest release from [GitHub Releases](https://github.com/boostsecurityio/bagel/releases).\n\n**macOS:**\n\n```\n# Intel Mac\ncurl -sL https://github.com/boostsecurityio/bagel/releases/latest/download/bagel_Darwin_x86_64.tar.gz | tar xz\nsudo mv bagel /usr/local/bin/\n\n# Apple Silicon\ncurl -sL https://github.com/boostsecurityio/bagel/releases/latest/download/bagel_Darwin_arm64.tar.gz | tar xz\nsudo mv bagel /usr/local/bin/\n```\n\n**Homebrew:**\n\n```\nbrew install bagel\n```\n\n**Linux:**\n\n```\n# x86_64\ncurl -sL https://github.com/boostsecurityio/bagel/releases/latest/download/bagel_Linux_x86_64.tar.gz | tar xz\nsudo mv bagel /usr/local/bin/\n\n# ARM64\ncurl -sL https://github.com/boostsecurityio/bagel/releases/latest/download/bagel_Linux_arm64.tar.gz | tar xz\nsudo mv bagel /usr/local/bin/\n```\n\n**Windows:**\n\nDownload `bagel_Windows_x86_64.zip` from the [releases page](https://github.com/boostsecurityio/bagel/releases), extract it, and add it to your PATH.\n\n```\nInvoke-WebRequest -Uri \"https://github.com/boostsecurityio/bagel/releases/latest/download/bagel_Windows_x86_64.zip\" -OutFile \"bagel.zip\"\nExpand-Archive -Path \"bagel.zip\" -DestinationPath \".\"\n```\n\nRequires Go 1.25 or later.\n\n```\ngit clone https://github.com/boostsecurityio/bagel.git\ncd bagel\ngo build -o bagel ./cmd/bagel\nbagel version\nbagel scan\n```\n\nThis scans your workstation and outputs findings to stdout in JSON format.\n\n| Flag | Description | \n|---|---|\n| `--format` ,`-f` | Output format: `json` (default),`table` | \n| `--output` ,`-o` | Write output to a file instead of stdout | \n| `--strict` | Exit with code 2 if any findings are detected | \n| `--no-cache` | Bypass file index cache and force rebuild | \n| `--no-progress` | Disable progress bars | \n| `--verbose` ,`-v` | Enable verbose (debug) logging | \n| `--config` | Path to configuration file | \n| `--disable-version-check` | Disable the once-per-day check for newer bagel releases (env: `BAGEL_DISABLE_VERSION_CHECK` , config:`disable_version_check` ) | \n\n```\n# Save report to a file\nbagel scan -o report.json\n\n# Table output for quick review\nbagel scan -f table\n\n# CI gate: fail the build if findings exist\nbagel scan --strict\n\n# Debug a specific scan\nbagel scan --verbose --no-progress\n```\n\nBagel uses a YAML configuration file. It looks for `bagel.yaml` in these locations (in order):\n\n1. Path specified with `--config`\n2. Current directory (`./bagel.yaml` )\n3. Platform config directory (`~/.config/bagel/bagel.yaml` on Unix,`%APPDATA%\\bagel\\bagel.yaml` on Windows)\n\n```\nversion: 1\nprobes:\n  git:\n    enabled: true\n  ssh:\n    enabled: true\n  npm:\n    enabled: true\n  env:\n    enabled: true\n  shell_history:\n    enabled: true\n  cloud:\n    enabled: true\n  jetbrains:\n    enabled: true\n  gh:\n    enabled: true\n  ai_credentials:\n    enabled: true\n  ai_chats:\n    enabled: true\nprivacy:\n  redact_paths: []\n  exclude_env_prefixes: []\noutput:\n  include_file_hashes: false\n  include_file_content: false\n```\n\nAll probes are enabled by default. To disable a probe, set `enabled: false`.\n\nBy default, `bagel` reaches out at most once every 24 hours to check whether a newer release is available. The request reports the current bagel version, an anonymous instance identifier persisted under the platform config directory (`~/.config/bagel/version-check.yaml` on Unix, `%APPDATA%\\bagel\\version-check.yaml` on Windows), and a count of CLI invocations since the last check. No scan, host, or finding data is sent. To disable, use any of:\n\n- `--disable-version-check` flag\n- `BAGEL_DISABLE_VERSION_CHECK=1` environment variable\n- `disable_version_check: true` in`bagel.yaml`\n\n```\n{\n  \"metadata\": {\n    \"version\": \"0.1.0\",\n    \"timestamp\": \"2026-02-10T12:00:00Z\",\n    \"duration\": \"1.234s\"\n  },\n  \"host\": {\n    \"hostname\": \"dev-laptop\",\n    \"os\": \"darwin\",\n    \"arch\": \"arm64\",\n    \"username\": \"dev\",\n    \"system\": {\n      \"os_version\": \"15.3\",\n      \"kernel_version\": \"Darwin 25.2.0\",\n      \"cpu_model\": \"Apple M1\",\n      \"cpu_cores\": 8,\n      \"ram_total_gb\": 16\n    }\n  },\n  \"findings\": [\n    {\n      \"id\": \"git-ssl-verify-disabled\",\n      \"probe\": \"git\",\n      \"severity\": \"high\",\n      \"title\": \"Git SSL Verification Disabled\",\n      \"message\": \"Git is configured to skip SSL certificate verification...\",\n      \"path\": \"git-config:http.sslverify\"\n    },\n    {\n      \"id\": \"ssh-private-key-rsa\",\n      \"probe\": \"ssh\",\n      \"severity\": \"critical\",\n      \"title\": \"Unencrypted SSH Private Key Detected (RSA)\",\n      \"message\": \"An unencrypted RSA SSH private key was detected...\",\n      \"path\": \"file:/Users/dev/.ssh/id_rsa\"\n    }\n  ]\n}\n```\n\n- **Probes** : small, hermetic modules that scan specific areas of the system.\n- **Detectors** : reusable secret detection patterns used by probes.\n- **Collector** : orchestrates probes with timeouts and resource caps.\n- **Reporters** : render JSON or table output; emit exit codes for CI.\n\nEach probe declares its scope (user/system), paths touched, env vars read, and risk rules it can emit.\n\n| Probe | Description | What it checks | \n|---|---|---|\n| `git` | Git configuration security | SSL verification disabled, SSH config issues (StrictHostKeyChecking, UserKnownHostsFile), plaintext credential storage ( `credential.helper=store` ), dangerous protocols (ext, fd, file), fsck disabled, proxy settings, custom hooks path | \n| `ssh` | SSH configuration and key security | `StrictHostKeyChecking=no` ,`UserKnownHostsFile=/dev/null` ,`ForwardAgent=yes` , private key file permissions, unencrypted private keys | \n| `npm` | NPM/Yarn configuration | `.npmrc` and`.yarnrc` files:`strict-ssl=false` , HTTP (non-HTTPS) registries,`always-auth` settings | \n| `env` | Environment variables and dotfiles | Environment variables, shell config files ( `.bashrc` ,`.zshrc` ),`.env` files for embedded secrets | \n| `shell_history` | Shell history files | `.bash_history` ,`.zsh_history` for secrets in command history | \n| `cloud` | Cloud provider credentials | AWS ( `~/.aws/config` ,`~/.aws/credentials` ), GCP (`~/.config/gcloud/` ), Azure config files | \n| `jetbrains` | JetBrains IDE configuration | JetBrains IDE workspace files and configuration for embedded secrets | \n| `gh` | GitHub CLI | GitHub CLI authentication tokens and configuration | \n| `ai_cli` | AI CLI tools | Credential files and chat logs for Gemini, Codex, Claude, and OpenCode | \n\n| Detector | Description | Patterns detected | \n|---|---|---|\n| `github-token` | GitHub authentication tokens | Classic PAT ( `ghp_` ), Fine-grained PAT (`github_pat_` ), OAuth (`gho_` ), App User-to-Server (`ghu_` ), App Server-to-Server (`ghs_` ), Refresh Token (`ghr_` ) | \n| `npm-token` | NPM authentication tokens | NPM auth tokens ( `npm_*` ) | \n| `ai-service` | AI service API keys | OpenAI ( `sk-` ), Anthropic (`sk-ant-api03-` ,`sk-ant-admin01-` ), Hugging Face (`hf_` ,`api_org_` ) | \n| `http-authentication` | HTTP auth credentials | Bearer tokens, Basic Auth headers, API key headers ( `X-API-Key` , etc.), Basic Auth in URLs (`http://user:pass@host` ) | \n| `ssh-private-key` | SSH private keys | RSA, DSA, EC, OPENSSH, PKCS8 keys; detects encrypted vs unencrypted | \n| `cloud-credentials` | Cloud provider credentials | AWS Access Key ID ( `AKIA*` ,`ASIA*` , etc.), GCP API Key (`AIza*` ), Azure Storage Account Key | \n| `generic-api-key` | Generic secrets | High-entropy strings matching common secret patterns (uses Shannon entropy analysis) | \n| `jwt` | JSON Web Tokens | JWT tokens ( `eyJ` prefix with standard JWT structure) | \n\n| OS | Support | \n|---|---|\n| macOS (Intel & Apple Silicon) | Full support | \n| Linux (x86_64 & ARM64) | Full support | \n| Windows (x86_64) | Full support with platform-specific file paths and PowerShell history | \n\nAll probes work cross-platform with appropriate path handling for each OS.\n\n**Fork addition** -- not in upstream Bagel.\n\n`bagel scrub` removes credentials from AI CLI session logs and shell history files, replacing them with `[REDACTED-<type>]` markers while preserving conversation context.\n\n```\n# Scan and interactively confirm (default)\nbagel scrub\n\n# Skip prompt, apply immediately\nbagel scrub --yes\n\n# Scan only, no modifications\nbagel scrub --dry-run\n\n# Scrub without grace period (includes recent files)\nbagel scrub --yes --grace-minutes 0\n\n# Scrub a single file\nbagel scrub --yes --file ~/.claude/projects/foo/abc123.jsonl\n```\n\n| Flag | Default | Description | \n|---|---|---|\n| `--yes` /`-y` | `false` | Skip confirmation prompt and apply changes | \n| `--dry-run` | `false` | Scan and report only, do not modify files | \n| `--grace-minutes` | `60` | Skip files modified within this many minutes | \n| `--file` |  | Scrub a single file instead of all eligible files | \n\n**Targets:**\n\n- `~/.claude/projects/**/*.jsonl` -- Claude Code session logs\n- `~/.claude/projects/**/*.txt` -- Claude Code tool results\n- `~/.codex/sessions/**/*.jsonl` -- Codex CLI session logs\n- `~/.gemini/tmp/*/chats/*.json` -- Gemini CLI chat logs\n- `~/.local/share/opencode/**/*.json` -- OpenCode session logs\n- `~/.bash_history` -- Bash shell history\n- `~/.zsh_history` -- Zsh shell history\n- `~/.sh_history` -- Generic shell history\n- `~/.local/share/fish/fish_history` -- Fish shell history\n\n**Recommended workflow:**\n\n1. `bagel scan -f table` -- assess your exposure\n2. `bagel scrub --yes` -- clean up\n3. `bagel scan -f table` -- verify reduction\n4. Rotate any credentials that were found\n\n- **CI** : run`bagel scan --strict` in your pipeline to fail builds when findings are detected.\n- **Fleet-wide deployment** : for enterprise-grade deployment at scale with centralized posture reporting across your developer laptop fleet, see[BoostSecurity DEP](https://boostsecurity.io/solution/developer-endpoint) .\n\n- `0` – success, no findings detected (or`--strict` not set)\n- `1` – runtime error\n- `2` – findings detected (when using`--strict` )\n\n**Does it read my secrets?** No. It only gathers metadata and security‑relevant flags.\n\n**Is it noisy?** Probes are read‑only, batched, and time‑boxed to keep scans under a minute on typical dev machines.", "url": "https://wpnews.pro/news/bagel-is-a-cross-platform-cli-that-inspects-developer-workstations", "canonical_source": "https://github.com/boostsecurityio/bagel", "published_at": "2026-11-11 18:00:47+00:00", "updated_at": "2026-11-11 18:21:00.386325+00:00", "lang": "en", "topics": ["developer-tools", "ai-tools"], "entities": ["BoostSecurity", "Bagel", "BoostSecurity Developer Endpoint Protection", "GitHub", "JetBrains", "AWS", "GCP", "Azure"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/bagel-is-a-cross-platform-cli-that-inspects-developer-workstations", "markdown": "https://wpnews.pro/news/bagel-is-a-cross-platform-cli-that-inspects-developer-workstations.md", "text": "https://wpnews.pro/news/bagel-is-a-cross-platform-cli-that-inspects-developer-workstations.txt", "jsonld": "https://wpnews.pro/news/bagel-is-a-cross-platform-cli-that-inspects-developer-workstations.jsonld"}}