Guides¶
These pages cover common tasks you'll perform with TrustSight. Each guide is focused on a single workflow and assumes you've completed the quickstart.
| Guide | When to read it |
|---|---|
| Auditing Before Update | You want to scan AUR packages before yay -Syu : the everyday workflow. |
| Using TrustSight in CI | You want to gate package installs in a CI/CD pipeline using policy thresholds on the JSON report. |
| Acting on a Flag | A package scored above 20 or returned INCONCLUSIVE : what to do next. |
| Configuring Rules and Weights | You need to edit rules.toml or config.toml to match your threat model. |
| Tuning False Positives | A rule is firing too often on your package set : how to identify and fix it. |
| Watching the AUR Continuously | You want an always-on scanner over the whole AUR : the watch loop, service setups, and webhook alerts. |