ZIRAN Agent Security Scan

Version updated for https://github.com/taoq-ai/ziran to version v0.38.0.

  • This action is used across all versions by 1 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

ZIRAN is an AI-driven security tool designed to identify vulnerabilities in AI agents, including their capabilities and potential attack chains. It models agents as graph structures and conducts multi-phase campaigns to detect dangerous tool chains, execution-level side effects, and multi-phase exploits that conventional scanners might overlook. The tool uses machine learning to analyze the interactions between agent functions and tools, providing a comprehensive understanding of the agent’s behavior and vulnerabilities.

What’s Changed

0.38.0 (2026-08-29)

Features

  • observability: add –log-format flag and bind campaign/phase/vector log context (de1acee)
  • observability: configure structlog with json/text renderers and context helpers (8aef7f1)
  • observability: metrics CLI flags, Prometheus scrape test, Grafana dashboard, docs (4d7294f)
  • observability: OTel metrics export (Prometheus-compatible) (f71e238)
  • observability: OTel metrics module + campaign/phase/attack instrumentation (cbe49a3)
  • observability: structured JSON logging via structlog (4981da2)
  • runtime: add FlushThrottle for incremental checkpoint writes (9596291)
  • runtime: add on_vector_complete hook to PhaseExecutor (14c2752)
  • runtime: incremental mid-phase checkpoint flush with –checkpoint-flush-interval (9fe7940)
  • runtime: partial-phase checkpoint resume (6652f7f)
  • runtime: rate-limiting and retry with exponential backoff for LLM provider calls (17def68)
  • runtime: token-bucket limiter and retry-with-backoff for LLM calls (#281) (06d6ee3)
  • runtime: wire rate-limited LLM client into factory and CLI (#281) (e8bfc60)

Bug Fixes

  • alerting: never create a GitHub issue when dedup cannot be confirmed (5cda14d)
  • alerting: never create a GitHub issue when dedup cannot be confirmed (0c6e89a)
  • anthropic: detect AsyncAnthropic clients under anthropic 1.x (e33dd7c)
  • observability: guard provider label read and ignore prometheus_client imports (55c96ea)
  • security: bump mcp and json-repair to clear the audit gate (f264689)
  • security: bump mcp and json-repair to clear the audit gate (#370 tier 2) (01c5fd7)
  • security: bump pillow, pyasn1, bedrock-agentcore and websockets (56cc289)
  • security: bump pillow, pyasn1, bedrock-agentcore and websockets (#370 tier 1) (665c7a1)
  • security: clear new pip-audit advisories (aiohttp, cryptography, chromadb) (bae6690)
  • security: clear remaining npm audit high-severity advisories in ui (f0b3768)
  • security: clear remaining npm audit high-severity advisories in ui (e99c675), closes #373
  • typing: ignore missing anthropic stubs when extra not installed (7e1249e)

What’s Changed

Full Changelog: https://github.com/taoq-ai/ziran/compare/v0.37.1...v0.38.0