fix(models-grants): pair decided_by seed with status=accepted + short…

87e9e87

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

SonarQubeCloud

SonarCloud Code Analysis

coderabbitai

CodeRabbit

Models grants on: push 3

osionos_* relations are service_role-only

published snapshots die with the hold

member attributes are member-scoped and service_role-only

Fresh-Machine Migration on: pull_request 1

make all safety + footprint tests (bats)

clone --recursive + make all

BaaS CI on: pull_request 4

Go control-plane (vet + test)

Rust data-plane (test)

Rust realtime (test)

Static config (manifest parity + Prometheus rules)

gitleaks on: pull_request 1

secrets-scan (gitleaks, baseline-gated)

BaaS CLI — npm publish on: pull_request 1

Build · smoke-test · pack (never publishes)

Publish to npm (held — explicit trigger only)

Supply Chain on: pull_request 3

npm frozen installs

pnpm frozen installs

drawnosaurus front door (:3007) on: pull_request 1

:3007 CORS + deny rules against the real nginx.conf (bats)

mini-baas security on: pull_request 12

SAST · Semgrep

SCA · npm + pnpm audit (apps/grobase/src)

SCA · npm + pnpm audit (apps/grobase/sdks/js)

SCA · Snyk

Container · Trivy

Secret · TruffleHog

Secret · gitleaks

SCA · cargo-audit (apps/grobase/src/data-plane-router)

SCA · cargo-audit (apps/grobase/infra/docker/services/realtime/realtime-agnostic)

SCA · govulncheck

DAST · ZAP baseline

Security gate

graph-studio contract on: pull_request 2

static contract at the gitlink (bats)

runtime contract against the pinned pack (Playwright)

graph-studio pack in osionos-app on: pull_request 1

build osionos-app + serve the pack (bats)

Models grants on: pull_request 3

osionos_* relations are service_role-only

published snapshots die with the hold

member attributes are member-scoped and service_role-only

Code scanning results

Semgrep OSS

SonarCloud

Trivy

gitleaks

fix(models-grants): pair decided_by seed with status=accepted + short…

Uh oh!

Select a check to view from the sidebar