Github Action Python Packages

github-action-utils

Collection of python functions that can be used to run GitHub Action Workflow Commands

loki-mode-sdk

Multi-agent autonomous SDLC framework. Spec to deployed app. PRD, GitHub issue, OpenAPI/JSON/YAML, or one-line brief. 5 AI providers, 11 quality gates.

drift-analyzer

Detect architectural erosion from AI-generated code. Static analyzer for pattern fragmentation, architecture violations & mutant duplicates.

aina-scan

Enterprise SAST — Python/Java/C/C++/TypeScript/C#/Go/Rust — tree-sitter AST, 7-language support, interprocedural taint (3-hop BFS), AINA L3 causal chains, i18n (en/ko), 6-report output

apisec-ai-surface

Find and govern AI attack surfaces in application code at PR time. Free, OSS, runs offline.

agent-audit-kit

Static scanner for MCP-connected AI agent pipelines — 225 rules across 11 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.

antemortem

Make your AI coding agent prove every claim with a file:line citation, then machine-check each one offline. A verified-citation gate (CLI + MCP server + GitHub Action) that catches LLM hallucinations before merge.

rrdoctor

Artifact Evaluation readiness checker for research code: static scan, safe fixes, verify ladder, appendix, and agent-ready gates. Local-first, no API key.

codeclone

Deterministic Structural Change Controller for AI-assisted Python development

rlsgrid

Schema-driven Row-Level Security test matrix generator and cross-tenant fuzzer for Postgres/Supabase.

repokeeper

AI-powered OSS maintainer agent

cascade-review

AI-powered code reviewer with SonarQube rule simulation, blast radius analysis, and LLM change summary. Routes across local (Ollama), Groq, OpenRouter, Claude, Gemini, and OpenAI. Zero setup cost. Works as a CLI and GitHub Action.

good-egg

Trust scoring for GitHub PR authors based on contribution history.

abvx-set

Thin GitHub Action orchestration layer for the ABVX tools stack that owns the repo-config registry, runs agentsgen and ID with workflow presets, and provides review-first planning mode and predictable AI-docs outputs.

octomachinery

🤖 Invisible engine driving octobot machines. Simple, yet powerful. [DEMO BOT @ https://github.com/sanitizers/chronographer-github-app] | [tutorial @ https://tutorial.octomachinery.dev] | [docs @ https://docs.octomachinery.dev] | official web-site is at -->

siggate

The vendor-neutral significance gate for AI evals: tells you in CI whether an eval improvement is statistically REAL or within noise. Open-core, powered by deltagate.

plexhints

Type hinting library for Plex plugin development.

reviewcerberus

AI-powered code review tool that analyzes git branch differences and generates comprehensive review reports. Supports AWS Bedrock and Anthropic API. Features automated analysis of logic, security, performance, and code quality with smart token efficiency through prompt caching.

iga

IGA is the InvenioRDM GitHub Archiver, a standalone program as well as a GitHub Action that lets you automatically archive GitHub software releases in an InvenioRDM repository.

modelpin

Dependabot for AI models — replay your app's scenarios across a model migration and catch real behavioral regressions before they ship. Low false-positive by design. CLI + GitHub Action. Open-core, Apache-2.0.

pylock-lint

Static CI linter for PEP 751 pylock.toml: hash completeness, sdist-only builds, platform portability, and drift vs pyproject.toml.

aina-vibeguard

🛡️ AST security scanner for AI/LLM-generated code. 48 patterns (33 security + 15 vibe-coding). 9 languages. GitHub Action included.

poetry-plugin-check-yanked

A Poetry plugin to check for yanked packages in the poetry.lock file.

securescan

Security scanning without the SaaS tax. Multi-scanner orchestration, baseline diffing, SBOM + SARIF, signed everything — runs in your terminal, your CI, or a dashboard you own.