Secure Pipeline Template

Wed, 27 May 2026 00:00:00 +0000

“Six Gates to Production”

Most CI/CD templates stop at build-and-deploy. This one treats every commit as untrusted until six independent security tools have examined it. It is the pipeline I wish every client already had.

What problem this solves

A container image landing in production without being scanned is a liability. But bolting a scanner onto an existing pipeline is fragile: the scanner runs, the output gets ignored, and the deployment continues anyway. This template makes security gates non-negotiable. A critical finding in Semgrep, Trivy, or any other tool blocks the pipeline. A warning gets logged to a SARIF report. The deployment only proceeds when every gate passes.

PR Insights Action

Mon, 11 May 2026 00:00:00 +0000

“A GitHub Action That Reads Your Pull Requests”

Reviewing a large pull request often means scrolling through the diff to understand its scope. How many files changed? Which files were added versus modified? How many commits are in this branch? This action answers those questions automatically and posts them as a comment on the PR.

What it does

When a pull request is opened or updated, the action fetches PR data from the GitHub API and generates:

Ci-Cd on Adur

Secure Pipeline Template

What problem this solves

PR Insights Action

What it does