Guides¶
These pages cover common tasks you'll perform with TrustSight. Each guide is focused on a single workflow and assumes you've completed the quickstart.
| Guide | When to read it |
|---|---|
| Auditing Before Update | You want to scan AUR packages before yay -Syu : the everyday workflow. |
| Using TrustSight in CI | You want to gate package installs in a CI/CD pipeline using exit codes or policy thresholds. |
| Acting on a Flag | A package scored above 20 or returned INCONCLUSIVE : what to do next. |
| Configuring Rules and Weights | You need to edit rules.toml or config.toml to match your threat model. |
| Tuning False Positives | A rule is firing too often on your package set : how to identify and fix it. |
| Running the Sandbox | You want to sandbox a PKGBUILD's build and install scripts before approving them (aspirational). |