d-flex flex-column width-full">

chore(ci): Bump docker/build-push-action from 5 to 7

d32423e

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Code scanning results

CodeQL

semgrep

.github/workflows/promotion-pipeline.yml on: push 1

.github/workflows/semgrep-rules.yaml on: push 1

.github/workflows/dependency-check.yml on: push 1

.github/workflows/secret-scanning.yml on: push 6

secret-scan

SAST Security Scan on: pull_request 34

CodeQL (javascript)

CodeQL (typescript)

Semgrep Scan

ESLint Security

npm Dependency Audit

Gitleaks Secret Scan

SBOM Generation (CycloneDX)

SAST Results Summary

Heady™ CI/CD Pipeline on: pull_request 3

Lint & Test

Security Scan

Deploy to Cloudflare

Build & Push Image

Deploy to Cloud Run

Verify Domains

Heady™ CI/CD on: pull_request 4

Security Gates

Lint & Test

Deploy to Cloud Run

Deploy Cloudflare Workers

Verify All Domains

Security Scan on: pull_request 15

CodeQL Analysis (javascript)

Dependency Vulnerability Scan

Secrets Detection

Container Image Scan

Semgrep SAST

License Compliance

Heady™ CI/CD Pipeline on: pull_request 6

Code Quality

Security Audit

Python Tests

Test Suite

Build Packages

Deploy to Cloud Run

Heady™ Pilot CI/CD Pipeline on: pull_request 5

Lint & Type Check

Unit & Integration Tests

Security Scan

Build & Push Images

Deploy to Pilot

Quality Gates on: pull_request 6

lint

test

security-scan

eval-gate

.github/workflows/secret-scanning.yml on: pull_request 2

secret-scan

Secret Scan on: pull_request 5

secret-scan

Pre Deploy Check on: pull_request 2

validate

Dependency Review on: pull_request 1

Review Dependencies

Heady™ CI/CD Pipeline on: pull_request 4

Validate Determinism & Endpoints

Security Scan

Deploy Cloudflare Workers

Deploy Cloud Run Services

Security Gate on: pull_request 7

Check Security Override

Collect SAST Findings

Check for Exposed Secrets

Check CVE Threshold (CVSS >= 7.0)

Security Gate Decision

Enforce Security Gate

Heady™ Production Deploy on: pull_request 3

Security Scan

Validate

Build Docker Image

Deploy Edge Worker

Deploy Cloud Run

Post-Deploy Verify

Heady™ Autonomous Projections on: pull_request 7

🔒 Security Scan (P0)

🧬 Validate Monorepo

📦 SBOM & Container Scan (P2)

☁️ Project → Cloud Run

🤗 Project → HF Spaces

⚡ Project → Cloudflare Edge

🔥 Post-Deploy Smoke Tests

✅ Auto-Success Pipeline

HeadyValidator on: pull_request 28

Phase 1: Lint & Type Check

Phase 2: Unit Tests

Phase 3: Security Scan

Phase 4: Docker Build Validation

Phase 5: CSL & φ-Math Validation

Phase 6: Integration Smoke Test

Promotion Report

Select a check to view from the sidebar