Tracegate Cicd Security Gate

Provenance-aware CI/CD security gate: attributes each scanner finding to the lock-file commit that introduced the vulnerable version (version diff, not line blame), inside a signed, fail-closed gate with blast radius and reachability triage

Description excerpted from the original listing, which is linked below.