ci: add offline (inline-toolchain) build canary workflow (#1304) (#1314)

7fc3c7f

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Semgrep Code - Wikid82

semgrep-cloud-platform/scan

Semgrep - SAST Scan on: push

Semgrep SAST Scan

release-please on: push

release-please

Integration Tests on: push

Build Charon image

Cerberus Security Stack Integration

Coraza WAF Integration

Rate Limiting Integration

CrowdSec Bouncer Integration

Security Scan (PR) on: push 4

Trivy Binary Scan

CodeQL - Analyze on: push

CodeQL analysis (go)

CodeQL analysis (javascript-typescript)

Go Benchmark on: push

Performance Regression Check

Orthrus Agent — Build & Publish on: push

build-and-push

Supply Chain Verification (PR) on: push

Verify Supply Chain

Quality Checks on: push 20

Auth Route Protection Contract

Muzzle Allowlist Parity (backend/agent,

Codecov Trigger/Comment Parity Guard

Toolchain key / freshness-guard scripts (bats)

Toolchain pin freshness (verify-toolchain-pin)

Backend (Go)

Agent (Go)

Frontend (React)

Upload Coverage to Codecov on: push

Backend Codecov Upload

Frontend Codecov Upload

Agent Codecov Upload

Docker Build, Publish & Test on: push 2

setup

build-amd64

build-arm64

merge-and-publish

Security Scan PR Image

Integration Tests on: pull_request

Build Charon image

Cerberus Security Stack Integration

Coraza WAF Integration

Rate Limiting Integration

CrowdSec Bouncer Integration

Supply Chain Verification (PR) on: pull_request

Verify Supply Chain

Build (offline / inline toolchain) on: pull_request

Build offline image (amd64, from-source Caddy + CrowdSec)

CodeQL - Analyze on: pull_request

CodeQL analysis (go)

CodeQL analysis (javascript-typescript)

Quality Checks on: pull_request 20

Auth Route Protection Contract

Muzzle Allowlist Parity (backend/agent,

Codecov Trigger/Comment Parity Guard

Toolchain key / freshness-guard scripts (bats)

Toolchain pin freshness (verify-toolchain-pin)

Backend (Go)

Agent (Go)

Frontend (React)

Go Benchmark on: pull_request

Performance Regression Check

Toolchain Image — Build & Publish on: pull_request 1

Build & publish toolchain image

Trivy scan (toolchain image)

Sync toolchain pin onto the PR branch

Open toolchain digest-bump PR

Semgrep - SAST Scan on: pull_request

Semgrep SAST Scan

Docker Build, Publish & Test on: pull_request

setup

build-amd64

build-arm64

merge-and-publish

Security Scan PR Image

Security Scan (PR) on: pull_request 4

Trivy Binary Scan

Upload Coverage to Codecov on: pull_request

Backend Codecov Upload

Frontend Codecov Upload

Agent Codecov Upload

Code scanning results

Trivy

CodeQL

Semgrep OSS

grype

ci: add offline (inline-toolchain) build canary workflow (#1304) (#1314)

Uh oh!

Select a check to view from the sidebar