AI安全扫描

Build and embed

Build a distribution

Run these commands from the repository root. Outputs go to bin/; Windows binaries have an .exe suffix.

For targets that require the frontend, install Node.js/npm (CI uses Node.js 22), then install dependencies once before building:

npm --prefix web/frontend ci
make
make full

These targets use CGO_ENABLED=0. make web-build builds the full edition; make web also starts its Web service. Build tags are maintained in editions.env, and the build steps in Makefile. To build the separate cyber-web Hub from source, run make frontend, then CGO_ENABLED=0 go build -tags "full sqlite" -o bin/cyber-web ./cmd/cyber-web. Native recording uses make record, requires CGO and its SDK, and has separate build instructions.

Build the minimal local Agent

make agent needs only Go and the Makefile toolchain. It excludes scanner, proxy, IOA, browser, recording and Web dependencies. After configuring a model, run it directly with -p:

make agent
./bin/agent -p "Read the current directory and explain its structure; do not modify files"

To build without Make, use PowerShell from the repository root:

$env:CGO_ENABLED = "0"
go build -trimpath -buildvcs=false -ldflags "-s -w" -o bin/agent.exe ./cmd/agent
.\bin\agent.exe -p "Read the current directory and explain its structure; do not modify files"

Advanced builds

Resource embedding switches · External tools and offline distribution · Native recording.

With an LLM configured: run a local task and save its events

aiscan agent -p "Read the current directory and explain its structure; do not modify files" -o first-run.jsonl

Configure a model

Run cyber-web init or aiscan init to configure your model in ~/.cyber/cyber.yaml. For project overrides, add --project. These are shared cyber-harness commands, also available in the minimal agent CLI. Existing files are preserved. Configuration guide.

Example cyber.yaml:

llm:
  provider: openai
  base_url: https://api.deepseek.com/v1
  model: deepseek-chat

Set CYBER_API_KEY to your credential and use the endpoint and model available to your account. For Anthropic-compatible services, use provider: anthropic and the corresponding settings. See the configuration reference for protocols, profiles and precedence.