Skylos - Python SAST, Dead Code Detection & PR Gate

April 10, 2026

Version updated for https://github.com/duriantaco/skylos to version v4.3.2.

This action is used across all versions by 14 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

Skylos is an open-source static analysis tool designed for Python, TypeScript, and Go projects to detect dead code, hardcoded secrets, exploitable flows, and AI-generated security regressions. It streamlines code quality and security by automating local scans, CI/CD pull request gating, and providing actionable insights through GitHub annotations and review comments. Ideal for teams using AI coding assistants or modern frameworks, it offers robust capabilities like framework-aware analysis, AI defense, and OWASP LLM security checks.

What’s Changed

fix(ts): resolve workspace exports and local imports maps by @duriantaco in https://github.com/duriantaco/skylos/pull/181
chore(deps): bump cryptography from 46.0.6 to 46.0.7 by @dependabot[bot] in https://github.com/duriantaco/skylos/pull/183
refactor(core): reduce gatekeeper debt without changing behavior by @duriantaco in https://github.com/duriantaco/skylos/pull/184
refactor(core): reduce fixgen debt without changing behavior by @duriantaco in https://github.com/duriantaco/skylos/pull/185
refactor(core): reduce agent center debt without changing behavior by @duriantaco in https://github.com/duriantaco/skylos/pull/186
refactor(core): reduce agent service tech debt by @duriantaco in https://github.com/duriantaco/skylos/pull/187
refactor(core): deduplicate agent service error payloads by @duriantaco in https://github.com/duriantaco/skylos/pull/188
refactor(core): reduce triage learner debt without changing behavior by @duriantaco in https://github.com/duriantaco/skylos/pull/189
refactor(core): reduce discover detector technical debt by @duriantaco in https://github.com/duriantaco/skylos/pull/190
refactor(core): reduce grep verify debt by @duriantaco in https://github.com/duriantaco/skylos/pull/191
refactor(core): reduce sync debt by @duriantaco in https://github.com/duriantaco/skylos/pull/192
refactor(core): reduce api debt without changing behavior by @duriantaco in https://github.com/duriantaco/skylos/pull/193
fix(sync): support top-level cloud pull config by @duriantaco in https://github.com/duriantaco/skylos/pull/194
chore(main): release 4.3.2 by @duriantaco in https://github.com/duriantaco/skylos/pull/195

Full Changelog: https://github.com/duriantaco/skylos/compare/v4.3.1...v4.3.2