zeekay 6ad9b945ea static analysis runs again; the GitHub-only scanners do not
The forge reads the first WORKFLOW_DIRS entry that exists. .hanzo/workflows has
existed here since the image lane landed, so all 43 workflow files under
.github/workflows ran nowhere. Nothing went red, because the checks that would
go red were the ones not running: the forge listed 2 workflows for this repo
against 45 files on disk. This repo has had no test gate of any kind since
actions-runner-controller was decommissioned.

security.yml replaces the two dead scanners rather than restoring them:

  - codeql.yml ended in github/codeql-action/analyze under `security-events:
    write`, which names an upload to GitHub's code-scanning store. There is no
    such store here, and a scanner whose findings have nowhere to go is not a
    scanner. Semgrep covers the same two languages CodeQL was configured for.
  - mend.yml ran the Mend unified agent against WS_APIKEY / WS_USERKEY. That is
    a commercial subscription this org does not hold. Dependency and licence
    scanning is GONE, not replaced — semgrep reads code, not a dependency graph,
    and claiming otherwise would be the more expensive mistake.

Measured before it was written: 98 rules over 3558 git-tracked files in 20s.

The other 42 files are upstream's CI and cannot run here: PR labelers, autofix
bots that push to pull requests, IBM Globalization Pipeline, Codeflash, macOS
and Windows release trains, PyPI publishes for packages this fork does not own,
and a `ci_success` gate that passes only when upstream's flow-nightly was
published to PyPI that same day. They are deleted rather than moved — a dead
file cannot accumulate where there is no directory.

Still ungated and needing their own change: mypy, which lint-py.yml ran and
which nothing ever called even upstream, and `ruff check`, which the tree fails
1204 times against its own declared config.
2026-08-13 21:10:55 -07:00
2025-03-20 00:05:55 +00:00
2026-04-23 17:49:53 -07:00

Hanzo Flow

Release Notes PyPI - License PyPI - Downloads

Hanzo Flow is a powerful platform for building and deploying AI-powered agents and workflows. It provides developers with both a visual authoring experience and built-in API and MCP servers that turn every workflow into a tool that can be integrated into applications built on any framework or stack. Hanzo Flow comes with batteries included and supports all major LLMs, vector databases and a growing library of AI tools.

Highlight features

  • Visual builder interface to quickly get started and iterate.
  • Source code access lets you customize any component using Python.
  • Interactive playground to immediately test and refine your flows with step-by-step control.
  • Multi-agent orchestration with conversation management and retrieval.
  • Deploy as an API or export as JSON for Python apps.
  • Deploy as an MCP server and turn your flows into tools for MCP clients.
  • Observability with LangSmith, LangFuse and other integrations.
  • Enterprise-ready security and scalability.

Quickstart

Requires Python 3.10-3.13 and uv (recommended package manager).

Install

From a fresh directory, run:

uv pip install hanzoflow -U

Run

To start Hanzo Flow, run:

uv run hanzoflow run

Hanzo Flow starts at http://127.0.0.1:7860.

Other install options

Run from source

If you've cloned this repository and want to contribute, run this command from the repository root:

make run_cli

For more information, see DEVELOPMENT.md.

Docker

Start a Hanzo Flow container with default settings:

docker run -p 7860:7860 hanzoai/flow:latest

Hanzo Flow is available at http://localhost:7860/.

Deployment

Hanzo Flow is completely open source and you can deploy it to all major deployment clouds.

Contribute

We welcome contributions from developers of all levels. If you'd like to contribute, please check our contributing guidelines and help make Hanzo Flow more accessible.

S
Description
No description provided
Readme MIT
602 MiB
Languages
Python 58.6%
TypeScript 25.5%
JavaScript 14.8%
CSS 0.3%
Makefile 0.2%
Other 0.4%