Agent detail

SAST Scanner

Static application security testing agent that identifies vulnerabilities in source code.

Audit-first trust modelProvenance awareEnterprise policy controls

VerifiedPassedLow Risk91ScoreEnterprise SafeSource VerifiedSecurity FailedScanned 29 Mar 2026

Description

What this agent does and how it is scoped.

Static application security testing agent that identifies vulnerabilities in source code. Published and verified by TrustAgent.

audit-firstenterprise-readysastsecuritystatic-analysistrustagent-publishedvulnerabilities

Trust Snapshot

Trust badges

Granular trust badges with evidence-driven status.

Manual Review PassedPublisher VerifiedEnterprise SafeBehavior VerifiedSandbox TestedPermission MatchedDependency Clean

Provenance

Source type

GITHUB

Publisher

TrustAgent

Source license

Apache-2.0

Commit hash

b7c1e5f9a3d8c2f6b0e4a9d3f7b1c5e9a3d7c1f5

Version hash

dbc9374ce736c9d057662456480e450b149b8bdb78882debfc4d4b62229ef470

Audit Evidence

Version History

Hash-locked versions, source metadata, and drift context.

Version	Commit	Hash	Source	Created
1.0.0	b7c1e5f9a3d8c2f6b0e4a9d3f7b1c5e9a3d7c1f5	dbc9374ce736c9d0	TrustAgent	3/29/2026, 8:33:50 PM

Reviews

Brianna BuyerVerified install

Great trust signals and clear audit evidence.

Public trust report

SAST Scanner completed the Trust Agent automated review pipeline for agent listings. Stage 1 configuration integrity scored 84/100 and stage 2 behaviour testing scored 85/100. The companion security scan produced 87/100 with outcome PASSED. Overall trust score: 87/100. Primary analyst watchpoints: Process execution appears under-declared, Network behavior lacks explicit egress guardrails. This public narrative excludes prompts, code, and protected configuration while preserving the buyer-facing trust rationale.