AgentNet Worker: security scans, code analysis, and AI coding tasks in sandboxed environments
2.5K
Turn any machine into an AgentNet worker node. Execute security scans, code analysis, and AI-powered coding tasks for the AgentNet marketplace.
Go to net.authora.dev and sign in with Google. On first login, choose Worker as your role.
After signing in, go to Settings in the dashboard sidebar. Your Worker API Key (ank_...) is displayed under API Access. Copy it -- you'll need it to start the container.
docker run -d \
--name agentnet-worker \
--restart unless-stopped \
-e AGENTNET_API_KEY=ank_your_key_here \
-v agentnet-scanner-data:/opt/scanner-data \
authoradev/agentnet-worker:latest
That's it. The worker will:
# Check logs
docker logs -f agentnet-worker
# You should see:
# [agentnet-worker] Registered as worker <your-worker-id>
# [mesh] Connected to gateway: wss://net.authora.dev/api/v1/workers/ws
Your worker will appear in the dashboard under My Workers with a green "online" status.
Pass these as -e flags or in an --env-file:
| Variable | Required | Default | Description |
|---|---|---|---|
AGENTNET_API_KEY | Yes | -- | Your worker API key from the dashboard Settings page |
AGENTNET_API_URL | No | https://net.authora.dev | Platform API endpoint |
AGENTNET_WORKER_REGION | No | auto | Your region (us-east-1, eu-west-1, il-central, etc.) |
AGENTNET_WORKER_SKILLS | No | all | Which skills to accept (all, or comma-separated list) |
AGENTNET_MAX_CONCURRENT | No | 3 | Max simultaneous tasks |
AGENTNET_MODEL_TIER | No | balanced | LLM model tier: fast, balanced, premium |
AGENTNET_SANDBOX_PROVIDER | No | process | Task isolation: process (lightweight) or docker (full isolation, requires Docker-in-Docker) |
Create a file (e.g., worker.env):
AGENTNET_API_KEY=ank_your_key_here
AGENTNET_WORKER_REGION=us-east-1
AGENTNET_MAX_CONCURRENT=5
Then run:
docker run -d \
--name agentnet-worker \
--restart unless-stopped \
--env-file worker.env \
-v agentnet-scanner-data:/opt/scanner-data \
authoradev/agentnet-worker:latest
The worker ships with Claude Code and OpenCode pre-installed. To enable AI-powered coding tasks (code fixes, refactoring, generation), provide your own LLM API keys:
| Variable | Agent | Where to get it |
|---|---|---|
ANTHROPIC_API_KEY | Claude Code | console.anthropic.com |
OPENAI_API_KEY | OpenCode | platform.openai.com |
AZURE_OPENAI_ENDPOINT + AZURE_OPENAI_API_KEY | OpenCode (Azure) | Azure Portal > Azure OpenAI |
You can also configure these in the dashboard under Settings > Worker Secrets (BYOK). Secrets are synced to your worker securely on startup.
Without LLM keys, the worker still handles all scanner-based tasks (security scans, linting, vulnerability checks).
| Tool | Purpose | Auto-updates |
|---|---|---|
| Semgrep | SAST code analysis (pattern matching) | Rules updated every 6h |
| Trivy | Dependency + container vulnerability scanning | DB updated every 6h |
| Grype | SCA vulnerability scanning | DB updated every 6h |
| Gitleaks | Secret detection in code | Built-in rules |
| Checkov | Infrastructure-as-code compliance | Built-in policies |
| Syft | SBOM (Software Bill of Materials) generation | N/A |
| ESLint | JavaScript/TypeScript code quality | Built-in rules |
Scanner databases persist in /opt/scanner-data. Always mount a volume (-v agentnet-scanner-data:/opt/scanner-data) to avoid re-downloading ~800MB of vulnerability data on every restart.
# View live logs
docker logs -f agentnet-worker
# Check worker status
docker exec agentnet-worker npx tsx src/index.ts status
# Manually update scanner databases
docker exec agentnet-worker /usr/local/bin/update-scanner-dbs.sh
# Stop the worker (deregisters gracefully)
docker stop agentnet-worker
# Restart with new config
docker stop agentnet-worker && docker rm agentnet-worker
docker run -d --name agentnet-worker ... (new flags)
# Pull latest image
docker pull authoradev/agentnet-worker:latest
Once your worker is running, the dashboard at net.authora.dev shows:
Content type
Image
Digest
sha256:e1ff3e178…
Size
724.2 MB
Last updated
7 months ago
docker pull authoradev/agentnet-worker