Releases: SamAlpha1/GitHubTrustAuditor
Releases · SamAlpha1/GitHubTrustAuditor
Release list
GitHub Trust Auditor v1.1.0
GitHub Trust Auditor v1.1.0
Adoption and automation release maintained by SamAlpha1.
Highlights
- Added reusable GitHub Action support through
action.yml. - Added a copy-ready workflow example for auditing a GitHub account from GitHub Actions.
- Produces JSON and standalone HTML reports in CI.
- Added stable
v1tag for workflow usage:SamAlpha1/GitHubTrustAuditor@v1. - Aligned CLI account scoring with the context-aware web model so informational wallet/network capability does not become a malicious score by itself.
- Critical account verdicts require stronger correlated evidence such as explicit exfiltration behavior or dangerous executable install hooks.
- Reusable Action smoke-tested against SamAlpha1 and verified to generate reports successfully.
- README includes web, CLI, Action usage, maintainer links, and the public launch post.
Live app
https://samalpha1.github.io/GitHubTrustAuditor/
GitHub Action
- uses: SamAlpha1/GitHubTrustAuditor@v1
with:
username: octocatLaunch post
https://x.com/samalpha_/status/2095568206484164967
Maintainer
GitHub: https://github.com/SamAlpha1
GitHub Trust Auditor v1.0.0
GitHub Trust Auditor v1.0.0
First public release of GitHub Trust Auditor.
Highlights
- Defensive static analysis of accessible public GitHub repositories.
- Bilingual English / فارسی web UI.
- Overall 0–100 account score with transparent score breakdown.
- Repository-by-repository scoring and file/line evidence.
- Wallet/security-focused checks for credential handling, secret exfiltration, clipboard replacement, approvals, transactions, install hooks, obfuscation, and secret exposure.
- GitHub contribution activity used only as a small contextual signal.
- Shareable scan links using
?user=USERNAME. - Share Result, Post on X, Copy Link, and Copy README Badge actions.
- Cache-first repeated scans and GitHub API rate-limit fallback.
- CI, SECURITY policy, contribution guide, code of conduct, issue templates, PR template, and public roadmap.
Important
GitHub Trust Auditor performs context-aware static technical analysis. A clean result does not prove a person is honest, and a risk result does not prove a person is a scammer. Target code is not executed.
Live demo
https://samalpha1.github.io/GitHubTrustAuditor/
Maintainer
GitHub: https://github.com/SamAlpha1
X: https://x.com/samalpha_