Add Trustabl security scanning to CI

[joshua-trustabl]

We came across your repo and we like how you've developed a comprehensive toolkit for blockchain data analysis, wallet management, and AI agent interaction with blockchains, simplifying complex operations into core components. We scanned the repo, and noticed agent runtime reliability findings that might be worth reviewing.

1. [MEDIUM] Project uses default OpenAI tracing
   File: python/examples/adapter_google_adk/example.py
   What it means: The project uses the OpenAI Agents SDK with default tracing enabled.

2. [MEDIUM] LlmAgent has no description
   File: python/examples/adapter_google_adk/example.py
   What it means: Google ADK routes delegation between agents using the description= field on each LlmAgent.

3. [MEDIUM] Agent has no safety_settings
   File: python/examples/adapter_google_adk/example.py
   What it means: Google ADK agents use Gemini models whose configurable content filters default to OFF when safety_settings is not provided.

Recommendations are based on our understanding of agent runtime reliability, some findings may be intentional. Please let us know if this was intentional or if our findings are helpful so we can improve the accuracy of the scanner.

Best,
Trustabl.ai
Open-source AI agent reliability scanner (runs locally, GitHub Action)

Summary by CodeRabbit

• New Features
  • Added automated security scanning for changes pushed to the main branch and submitted through pull requests.
  • Scan results can be reported through repository security and pull request checks.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3b910074-a027-4a15-abde-1d3d43c0174f

📥 Commits

Reviewing files that changed from the base of the PR and between c6c2bb1 and 685c7f3.

📒 Files selected for processing (1)

• .github/workflows/trustabl.yml

---

Walkthrough

Adds a GitHub Actions workflow that runs the Trustabl action on pushes to main and pull requests, with configured repository, security-events, and pull-request permissions.

Changes

Trustabl workflow

Layer / File(s)	Summary
Trustabl scan workflow .github/workflows/trustabl.yml	Defines main push and pull-request triggers, permissions, repository checkout, and the Trustabl scan job.

Estimated code review effort: 1 (Trivial) | ~5 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: adding Trustabl security scanning to the CI workflow.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

Warning

⚠️ This pull request shows signs of AI-generated slop (description_diff_mismatch). It has been flagged by CodeRabbit slop detection and should be reviewed carefully.