Looks good! Does it work? 😄

@dkourkouzelis thanks to you! is there a way to test this locally? I thought it would have to go into staging first?

Look at this PR.

You could create a PR for the monorepo that adds a new job in linters.yml with the proper parameters (instead of sast). Then, as part of this line:

uses: endorlabs/github-action@a8ad74e765949855c4508590cf5e84258f9524d1

replace the SHA (a8ad74...) with the git SHA of your PR here. So

uses: endorlabs/github-action@148300e004442fe850f73225db898931f07560a4

you don't have to merge that PR but you will know if the scan will work.

Altetnatively, you could create an "ai-models-demo" repo similar to app-java-demo that has some models and is using the GitHub action to scan. Eg, for SAST.

@dkourkouzelis seems to run smoothly here is the PR here https://github.com/endorlabs/monorepo/actions/runs/12681804370/job/35346164588?pr=18370#step:8:80

There's no HF models found being used in our monorepo (which makes sense) but I can see the ai scan being elicited ("starting ai-models scanner") successfully so looks like it's working here!

@dkourkouzelis seems to run smoothly here is the PR here endorlabs/monorepo/actions/runs/12681804370/job/35346164588?pr=18370#step:8:80

There's no HF models found being used in our monorepo (which makes sense) but I can see the ai scan being elicited ("starting ai-models scanner") successfully so looks like it's working here!

Fantastic! 😄