Automated Security Gate Checks
Continuous DevSecOps pipeline gate executions mapped directly to regulatory and security controls
Data as of23 Aug 2026
| Repository / Ref | Gate Check | Outcome | Enforcement | Mapped Control | Commit | Actor | Ran At | |
|---|---|---|---|---|---|---|---|---|
DevSecOps/pipelines/simple-ci-push simple-ci-push | package Stage: package | Not Run | f-soc2-cc8-1 | — | — | — | ||
DevSecOps/automation/gitlab-ansible-dev-patching gitlab-ansible-dev-patching | deploy Stage: deploy | Not Run | f-soc2-cc8-1 | — | — | — | ||
DevSecOps/automation/gitlab-ansible-jira-update gitlab-ansible-jira-update | report Stage: report | Not Run | f-soc2-cc7-1 | — | — | — | ||
DevSecOps/automation/gitlab-ansible-patch-dev gitlab-ansible-patch-dev | deploy Stage: deploy | Not Run | f-soc2-cc8-1 | — | — | — | ||
DevSecOps/automation/gitlab-maintenance-events gitlab-maintenance-events | publish Stage: publish | Not Run | f-soc2-cc7-1 | — | — | — | ||
DevSecOps/automation/gitlab-maintenance-log gitlab-maintenance-log | publish Stage: publish | Not Run | f-soc2-cc7-1 | — | — | — | ||
.gitlab-ci.yml path0 | package Stage: serf | Not Run | f-soc2-cc8-1 | — | — | — | ||
DevSecOps/pipelines/gitlab-ci-serf-backup.yml pipelines | deploy Stage: deploy | Not Run | f-soc2-cc8-1 | — | — | — | ||
DevSecOps/pipelines/golden-image golden-image | deploy Stage: prod | Not Run | f-soc2-cc8-1 | — | — | — | ||
DevSecOps/pipelines/package-approval package-approval | publish Stage: publish | Not Run | f-soc2-cc7-1 | — | — | — | ||
northwind/svc-gateway #48213 | SCA (Trivy) Stage: verify | Fail | f-soc2-cc7-1 | 9f2c41ab | tomas.l | 22 Aug 2026 14:12 | ||
northwind/svc-gateway #48213 | SAST (Semgrep) Stage: verify | Pass | f-iso-a-8-28 | 9f2c41ab | tomas.l | 22 Aug 2026 14:10 | ||
northwind/web-console #48209 | Secret detection Stage: verify | Fail | f-soc2-cc8-1 | 3ad78e10 | hannah.feld | 22 Aug 2026 11:41 | ||
northwind/web-console #48209 | License compliance Stage: verify | Warn | f-iso-a-8-25 | 3ad78e10 | hannah.feld | 22 Aug 2026 11:40 | ||
northwind/infra-live #48204 | IaC policy (Checkov) Stage: plan | Fail | f-iso-a-8-9 | c81b0d44 | marcus.wei | 22 Aug 2026 09:05 | ||
northwind/svc-ledger #48198 | Artifact signing (cosign) Stage: release | Pass | f-soc2-cc8-1 | 77de1a92 | release-bot | 21 Aug 2026 18:22 | ||
northwind/svc-ledger #48198 | SCA (Trivy) Stage: verify | Pass | f-soc2-cc7-1 | 77de1a92 | release-bot | 21 Aug 2026 18:14 | ||
northwind/svc-notify #48191 | SCA (Trivy) Stage: verify | Skipped | f-soc2-cc7-1 | b204ff37 | priya.r | 21 Aug 2026 15:48 | ||
northwind/svc-webhooks #48186 | SCA (Trivy) Stage: verify | Fail | f-iso-a-8-8 | 4e9a01c5 | tomas.l | 21 Aug 2026 10:02 | ||
northwind/svc-search #48180 | SAST (Semgrep) Stage: verify | Pass | f-iso-a-8-28 | ff10b7a3 | dana.okafor | 20 Aug 2026 16:37 | ||
northwind/infra-live #48175 | Drift detection Stage: plan | Warn | f-iso-a-8-9 | 2c6e88b1 | marcus.wei | 20 Aug 2026 13:14 | ||
northwind/svc-payments #48170 | Artifact signing (cosign) Stage: release | Pass | f-soc2-cc8-1 | a90c33fe | release-bot | 20 Aug 2026 08:59 | ||
northwind/svc-payments #48170 | SCA (Trivy) Stage: verify | Pass | f-pci-6-3-1 | a90c33fe | release-bot | 20 Aug 2026 08:51 | ||
northwind/svc-gateway #48166 | Container scan Stage: verify | Fail | f-pci-6-3-3 | 61ba7c08 | tomas.l | 19 Aug 2026 17:26 |