fix(ci): verify Gitleaks release archives

e64d69f

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

CodeQL - Code Quality on: dynamic

Analyze (javascript-typescript)

Analyze (python)

DCO on: pull_request

DCO sign-off check

CodeQL on: pull_request

Analyze (javascript-typescript)

Analyze (python)

severity-gate

Conventional Commits PR title lint on: pull_request

Lint PR title (Conventional Commits)

Security Audit & SBOM on: pull_request

Dependency Vulnerability Scan

Secret Scan (Gitleaks)

Lockfile Integrity Check

License Compliance Report

Security Gate (blocking)

Runtime Audit Harness on: pull_request

Runtime Audit (audit:full)

Trivy + Grype container vulnerability scan on: pull_request

Trivy filesystem scan

Grype CVE gate (fail on HIGH/CRITICAL)

Source of Truth on: pull_request

Validate canonical metrics and vocabulary

Compare the live Hugging Face catalog

Dependabot auto-merge on: pull_request

auto-merge

Lighthouse CI on: pull_request 6

Lighthouse / terra

Lighthouse / vessels

Lighthouse / carlota-jo

Lighthouse / sentra

Lighthouse / counsel

Lighthouse / a11oy

Lighthouse Gate (accessibility enforced)

Accessibility Checks on: pull_request 6

A11y axe / carlota-jo

A11y axe / counsel

A11y axe / sentra

A11y axe / terra

A11y axe / vessels

A11y axe / a11oy

A11y Gate

README QA on: pull_request

Validate README images and badge workflows

CI on: pull_request 20

Clean clone (ubuntu-latest)

Clean clone (windows-latest)

Lint

Typecheck

Truth drift on: pull_request

truth-drift

Commitlint on: pull_request

Lint commit messages

Dependency Review on: pull_request

Review dependency changes

Schema import extensions on: pull_request

Relative imports carry an extension

Tests on: pull_request

Unit tests (vitest)

Property fuzz (fast-check) (amaru-runtime)

Property fuzz (fast-check) (ouroboros-verifier)

Property fuzz (fast-check) (sentra-runtime)

E2E Tests on: pull_request 3

e2e-app (carlota-jo)

e2e-app (a11oy)

E2E Gate

Pin Check on: pull_request

pin-check / All actions SHA-pinned

Doctrine Overclaim Guard on: pull_request

overclaim / Governed surfaces are honest (Theorem U citation rule)

Lockfile Registry Check on: pull_request

lockfiles / No lockfile references a Replit-internal registry host

Doctrine on: pull_request 1

check / doctrine

Code scanning results

CodeQL

Trivy

grype

GitHub Advanced Security / Trivy succeeded Aug 13, 2026 in 3s

No new alerts in code changed by this pull request

View all branch alerts.

Loading

Re-running checks...