Skip to content

Add Trustabl agent reliability check to CI - #7757

Closed
Trustabl-Je wants to merge 1 commit into
google:mainfrom
Trustabl-Je:add-trustabl-action
Closed

Trustabl-Je wants to merge 1 commit into
google:mainfrom
Trustabl-Je:add-trustabl-action

Conversation

@Trustabl-Je

Copy link
Copy Markdown

Hi! We came across google/adk-python and like that it provides practical examples of agents built with the ADK framework for various tasks.

We ran Trustabl, an open-source agent reliability scanner, on the repo and it flagged a few things that may be worth a look:

  • Agent uses web search built-in without before_tool_callback (contributing/samples/adk_team/adk_answering_agent/agent.py): This LlmAgent is wired with a web search built-in but has no before_tool_callback.

This PR adds a small GitHub Actions workflow (.github/workflows/trustabl.yml) so these checks run automatically:

  • Runs on pushes to the default branch, on pull requests, and on demand
  • Advisory only: the job uses continue-on-error, so it never fails your CI
  • No secrets needed; findings show up in the repo's code scanning results
  • Actions are pinned to commit SHAs, with read-only contents access

Some findings may be intentional. Happy to adjust the workflow, or to close this if it's not useful.

Add Trustabl to your CI · trustabl/trustabl-action · https://trustabl.ai

@google-cla

google-cla Bot commented Oct 27, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@GWeale GWeale self-assigned this Nov 9, 2026
@GWeale
GWeale self-requested a review November 9, 2026 21:02
@GWeale

GWeale commented Nov 9, 2026

Copy link
Copy Markdown
Collaborator

we're not going to add third-party scanner workflows to this repo's ci, so i'll take you up on the offer and close this. thanks @Trustabl-Je, and if the scan found a real problem in the adk_answering_agent sample, please open an issue for it.

@GWeale GWeale closed this Nov 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants