Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/stats/download-history.json
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{
"repo": "trustabl/trustabl",
"repo": "trustabl/agent-reliability-analyzer",
"unit": "cumulative_release_downloads",
"history": [
{
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/download-history.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name: Download history

# Weekly snapshot of trustabl/trustabl cumulative release-asset downloads.
# Weekly snapshot of trustabl/agent-reliability-analyzer cumulative release-asset downloads.
# GitHub exposes only the CURRENT total (download_count) with no history, so we
# record one dated point per run and commit it -> a JSON time series to graph.
# Same-day reruns overwrite that day's point (no duplicates).
Expand All @@ -22,7 +22,7 @@ jobs:
- name: Record cumulative downloads
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
TARGET_REPO: trustabl/trustabl
TARGET_REPO: trustabl/agent-reliability-analyzer
HISTORY_FILE: .github/stats/download-history.json
run: |
python - <<'PY'
Expand Down
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
<p align="center">
<a href="https://github.com/marketplace/actions/trustabl-fix-agent-reliability-issues"><img src="https://img.shields.io/badge/GitHub%20Marketplace-Trustabl-2088FF?logo=githubactions&logoColor=white" alt="Trustabl on GitHub Marketplace"></a>
<a href="https://github.com/trustabl/trustabl/releases"><img src="https://img.shields.io/github/downloads/trustabl/trustabl/total?logo=github&label=downloads&color=2088FF" alt="trustabl binary downloads"></a>
<a href="https://github.com/trustabl/agent-reliability-analyzer/releases"><img src="https://img.shields.io/github/downloads/trustabl/agent-reliability-analyzer/total?logo=github&label=downloads&color=2088FF" alt="trustabl binary downloads"></a>
<a href="https://github.com/search?q=uses%3A+trustabl%2Ftrustabl-action+path%3A.github%2Fworkflows&type=code"><img src="https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Ftrustabl%2Ftrustabl-action%2Fmain%2F.github%2Fbadges%2Ftrustabl-action.json" alt="Used by (repos)"></a>
</p>

Expand Down Expand Up @@ -168,8 +168,8 @@ fixes and open a fix PR on pull requests:
| `detectors` | _(all)_ | Comma-separated SDK subset: `claude_sdk`, `openai_sdk`, `google_adk`, `openshell`, `mcp`, `langchain`, `crewai`, `pydantic_ai`, `vercel_ai`, `autogen`. |
| `strict` | `false` | Pass `--strict` (fail on any finding). |
| `vuln-scan` | `false` | Match dependencies against a pinned OSV snapshot; report known CVEs as findings. |
| `rules-ref` | _(default)_ | Pin a `trustabl-rules` git ref. |
| `rules-repo` | _(default)_ | Override the `trustabl-rules` source repo. |
| `rules-ref` | _(default)_ | Pin an `agent-reliability-rules` git ref. |
| `rules-repo` | _(default)_ | Override the `agent-reliability-rules` source repo. |
| `upload-sarif` | `true` | Upload SARIF to Code Scanning. Needs `security-events: write`. |
| `sarif-file` | `trustabl.sarif` | SARIF output path. |
| `json-file` | `trustabl.json` | JSON `ScanResult` output path. |
Expand Down
4 changes: 2 additions & 2 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ in the release notes unless you would rather we did not.
This repository is a thin GitHub Action around the Trustabl CLI. It downloads the
upstream release binary, verifies it, runs a scan, and gates the build. The
scanner itself lives in
[trustabl/trustabl](https://github.com/trustabl/trustabl).
[trustabl/agent-reliability-analyzer](https://github.com/trustabl/agent-reliability-analyzer).

**In scope here**

Expand All @@ -35,7 +35,7 @@ scanner itself lives in
normal issue
- Vulnerabilities in a repository you scanned. Those belong to that repository
- Defects in the scanner itself. Report those to
[trustabl/trustabl](https://github.com/trustabl/trustabl/security/advisories/new) so one advisory covers every integration
[trustabl/agent-reliability-analyzer](https://github.com/trustabl/agent-reliability-analyzer/security/advisories/new) so one advisory covers every integration

## Supported versions

Expand Down
4 changes: 2 additions & 2 deletions action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,11 +34,11 @@ inputs:
required: false
default: "false"
rules-ref:
description: Pin trustabl-rules git ref. Empty = engine default.
description: Pin agent-reliability-rules git ref. Empty = engine default.
required: false
default: ""
rules-repo:
description: Override trustabl-rules source repo (owner/name or URL).
description: Override agent-reliability-rules source repo (owner/name or URL).
required: false
default: ""

Expand Down
Loading
Loading