Asqav Compliance Scanner

CI GitHub Action that scans PraisonAI agent code for governance gaps – audit trails, policy enforcement, revocation, human oversight, and error handling

from praisonaiagents import Agent

agent = Agent(
    name="GovernedAssistant",
    instructions="Follow audit, policy, and human-oversight requirements.",
)
agent.start("Review this agent module for compliance gaps")

The user opens a pull request; CI runs Asqav to scan PraisonAI imports for governance patterns before merge.

Asqav Compliance Scanner

Asqav Compliance is a GitHub Action that scans Python files importing agent frameworks (including PraisonAI) and checks for five governance patterns on every PR.

Quick Start

1. Add the workflow file

   Create .github/workflows/governance.yml in your repo:

   name: Governance Check
   on: [pull_request]
   permissions:
     pull-requests: write
     contents: read
   jobs:
     scan:
       runs-on: ubuntu-latest
       steps:
         - uses: actions/checkout@v4
         - uses: jagmarques/asqav-compliance@v1
           with:
             github-token: ${{ secrets.GITHUB_TOKEN }}

2. Open a pull request

   The scanner runs automatically on every PR and posts a compliance score as a PR comment.

What it checks

• Audit Trail – logging, signed actions, audit records
• Policy Enforcement – rate limits, scopes, permissions, guards
• Revocation Capability – kill switches, suspend, terminate, circuit breakers
• Human Oversight – approval flows, human-in-the-loop, confirmation gates
• Error Handling – try/except blocks around agent operations

Setup

Add this to .github/workflows/governance.yml in your repo:

name: Governance Check
on: [pull_request]
permissions:
  pull-requests: write
  contents: read
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: jagmarques/asqav-compliance@v1
        with:
          github-token: ${{ secrets.GITHUB_TOKEN }}

The action scans all Python files that import PraisonAI, LangChain, CrewAI, AutoGen, and other agent frameworks. It posts a compliance report as a PR comment with a score from 0 to 100.

Configuration

Example output

The action posts a Markdown report on each PR showing which files have governance coverage and which have gaps. Files importing agent frameworks without audit trails or error handling are flagged.

Links

• GitHub Marketplace
• Source Code

Best Practices

Related