Merge branch 'main' into fix/issue177-pin-live-gates

fb2ef08

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

SonarQubeCloud

SonarCloud Code Analysis

coderabbitai

CodeRabbit

BaaS CI on: push 4

Go control-plane (make baas-ci-go)

Rust data-plane (make baas-ci-rust-data-plane)

Rust realtime (make baas-ci-rust-realtime)

Static config (make baas-ci-static)

Models grants on: push 3

osionos_* relations are service_role-only

published snapshots die with the hold

member attributes are member-scoped and service_role-only

gitleaks on: pull_request 1

secrets-scan (gitleaks, baseline-gated)

HTTPS only (subject III.3) on: pull_request 1

no plaintext URL or port outside the backend

Supply Chain on: pull_request 3

npm frozen installs

pnpm frozen installs

mini-baas security on: pull_request 12

SAST · Semgrep

SCA · npm + pnpm audit (apps/grobase/src)

SCA · npm + pnpm audit (apps/grobase/sdks/js)

SCA · Snyk

Container · Trivy

Secret · TruffleHog

Secret · gitleaks

SCA · cargo-audit (apps/grobase/src/data-plane-router)

SCA · cargo-audit (apps/grobase/infra/docker/services/realtime/realtime-agnostic)

SCA · govulncheck

DAST · ZAP baseline

Security gate

Commit subjects on: pull_request 1

no one-word commit subjects

Code scanning results

Semgrep OSS

SonarCloud

Trivy

gitleaks

Merge branch 'main' into fix/issue177-pin-live-gates

Uh oh!

Select a check to view from the sidebar