Merge remote-tracking branch 'origin/develop' into fix/ci

6d00b26

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

SonarQubeCloud

SonarCloud Code Analysis

coderabbitai

CodeRabbit

BaaS CI on: push 4

Go control-plane (make baas-ci-go)

Rust data-plane (make baas-ci-rust-data-plane)

Rust realtime (make baas-ci-rust-realtime)

Static config (make baas-ci-static)

Models grants on: push 3

osionos_* relations are service_role-only

published snapshots die with the hold

member attributes are member-scoped and service_role-only

Supply Chain on: pull_request 3

npm frozen installs

pnpm frozen installs

HTTPS only (subject III.3) on: pull_request 1

no plaintext URL or port outside the backend

gitleaks on: pull_request 1

secrets-scan (gitleaks, baseline-gated)

mini-baas security on: pull_request 12

SAST · Semgrep

SCA · npm + pnpm audit (apps/grobase/src)

SCA · npm + pnpm audit (apps/grobase/sdks/js)

SCA · Snyk

Container · Trivy

Secret · TruffleHog

Secret · gitleaks

SCA · cargo-audit (apps/grobase/src/data-plane-router)

SCA · cargo-audit (apps/grobase/infra/docker/services/realtime/realtime-agnostic)

SCA · govulncheck

DAST · ZAP baseline

Security gate

Commit subjects on: pull_request 1

no one-word commit subjects

BaaS CI on: pull_request 4

Go control-plane (make baas-ci-go)

Rust data-plane (make baas-ci-rust-data-plane)

Rust realtime (make baas-ci-rust-realtime)

Static config (make baas-ci-static)

Fresh-Machine Migration on: pull_request 1

make all safety + footprint tests (bats)

clone --recursive + make all

Models grants on: pull_request 3

osionos_* relations are service_role-only

published snapshots die with the hold

member attributes are member-scoped and service_role-only

Code scanning results

Semgrep OSS

SonarCloud

Trivy

gitleaks

Merge remote-tracking branch 'origin/develop' into fix/ci

Uh oh!

Select a check to view from the sidebar