fix(ci): harden gitleaks install (retry + file download)

19b8b67

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

SonarQubeCloud

SonarCloud Code Analysis

coderabbitai

CodeRabbit

gitleaks on: push 1

secrets-scan (gitleaks, baseline-gated)

HTTPS only (subject III.3) on: push 1

no plaintext URL or port outside the backend

Commit subjects on: push 1

no one-word commit subjects

Fresh-Machine Migration on: pull_request 1

make all safety + footprint tests (bats)

clone --recursive + make all

BaaS CLI — npm publish on: pull_request 1

Build · smoke-test · pack (never publishes)

Publish to npm (held — explicit trigger only)

graph-studio contract on: pull_request 2

static contract at the gitlink (bats)

runtime contract against the pinned pack (Playwright)

gitleaks on: pull_request 1

secrets-scan (gitleaks, baseline-gated)

graph-studio pack in osionos-app on: pull_request 1

build osionos-app + serve the pack (bats)

Models grants on: pull_request 3

osionos_* relations are service_role-only

published snapshots die with the hold

member attributes are member-scoped and service_role-only

BaaS CI on: pull_request 4

Go control-plane (vet + test)

Rust data-plane (test)

Rust realtime (test)

Static config (manifest parity + Prometheus rules)

Supply Chain on: pull_request 3

npm frozen installs

pnpm frozen installs

HTTPS only (subject III.3) on: pull_request 1

no plaintext URL or port outside the backend

Commit subjects on: pull_request 1

no one-word commit subjects

hydrawn front door (:3007) on: pull_request 1

:3007 CORS + deny rules against the real nginx.conf (bats)

mini-baas security on: pull_request 12

SAST · Semgrep

SCA · npm + pnpm audit (apps/grobase/src)

SCA · npm + pnpm audit (apps/grobase/sdks/js)

SCA · Snyk

Container · Trivy

Secret · TruffleHog

Secret · gitleaks

SCA · cargo-audit (apps/grobase/src/data-plane-router)

SCA · cargo-audit (apps/grobase/infra/docker/services/realtime/realtime-agnostic)

SCA · govulncheck

DAST · ZAP baseline

Security gate

Code scanning results

Semgrep OSS

SonarCloud

Trivy

gitleaks

fix(ci): harden gitleaks install (retry + file download)

Uh oh!

Select a check to view from the sidebar