coulomb/open-cmis-tck
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

quality gate layer

Browse source
This commit is contained in:
tegwick 2026-05-07 17:00:10 +02:00
parent 4c44db802d
commit ed0f270278
6 changed files with 267 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/ARCHITECTURE-BLUEPRINT.md
View file

@ -243,6 +243,10 @@ Architecture lesson:
Repository quality packs should be normal extensions. A score is not a
certification verdict; it is a normalized finding and trend signal.
Quality gates should be core policy decisions over retained posture, not
extension-specific verdicts. The first gate layer checks latest run status,
unexpected finding count, and whether the latest trend regressed.
Sources:
- [OpenSSF Scorecard](https://openssf.org/projects/scorecard/)