Skip to content

feat(release): Phase 5 — Goreleaser + Sigstore + perf gate (#131) #134

feat(release): Phase 5 — Goreleaser + Sigstore + perf gate (#131)

feat(release): Phase 5 — Goreleaser + Sigstore + perf gate (#131) #134

Triggered via push May 13, 2026 03:27
Status Success
Total duration 46s
Artifacts 1

security.yml

on: push
OSV-Scanner (SCA)
5s
OSV-Scanner (SCA)
Trivy (filesystem + container scan)
11s
Trivy (filesystem + container scan)
Semgrep (SAST)
36s
Semgrep (SAST)
Gitleaks (secret scan)
14s
Gitleaks (secret scan)
jscpd (duplication < 3% on touched code)
19s
jscpd (duplication < 3% on touched code)
SBOM (SPDX + CycloneDX)
16s
SBOM (SPDX + CycloneDX)
Fit to window
Zoom out
Zoom in

Artifacts

Produced during runtime
Name Size Digest
sbom
25.7 KB
sha256:0cd8dc26ccdb46fd8006368cc9fd36d8e45f471ec24615941030b1977c19e2f6