32907234070
91%

Ran 25 Aug 2026 10:41PM UTC

Jobs 1

Files 25

Run time 1min

Badge

Embed ▾

Committed 25 Aug 2026 10:40PM UTC coverage: 91.026%. Remained the same

Build # 32907234070

Build Type

push

github

Committed by

web-flow

Commit Message

chore(ci): add Semgrep PR gate, scheduled full scan and badge (#14)

Brings this repo up to the same standard as the 18 PHP plugins, which have had
both since today. Until now this repo was covered only by Semgrep Managed
Scans, running on Semgrep's own schedule with no gate on a pull request at all.

Two layers, because one does not cover the other:

1. A semgrep job in ci.yml. `semgrep ci` is diff-aware on a pull request, so it
   fails only on findings that PR introduces. Which findings are fatal is
   decided by the Block remediation policy in Semgrep - currently Critical or
   High severity Code findings - not by anything in this file.

2. A weekly full scan of main in semgrep.yml. `semgrep ci` only marks findings
   "blocking" in a pull_request context; that was measured, not assumed - on
   bleedingdeacons/sentinel#50 the same probe file scored "3 blocking" in a PR
   run and "0 blocking" in a full scan of the same tree. So the PR gate covers
   what arrives through a PR and nothing else, and the scheduled scan gates on
   severity instead, that being the only signal available outside a PR.

A job rather than a step, unlike the plugins: the jobs here install a JDK, the
.NET SDK and (in hand) the MAUI Android workload, none of which Semgrep needs.

Both use this repo's own checkout pin (v5.1.0), not the v7 the PHP suite runs.

Coverage Stats

710 of 780 relevant lines covered (91.03%)

17.99 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	32907234070.1	25 Aug 2026 10:41PM UTC	25	91.03	GitHub Action Run

bleedingdeacons / integrity-sharp / 32907234070
91%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32907234070

bleedingdeacons / integrity-sharp / 32907234070 91%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 32907234070

bleedingdeacons / integrity-sharp / 32907234070
91%

README BADGES
x