Explore this system
Step through curated paths without changing the source diagram.
Beat
Next
ReadyChapter 01 / 01
Guided chapter
Diagram guideExplore this system
Inspecting compiled semantics
E ExportT ThemeS Style0 Reset+ Zoom in- Zoom outEsc Close
Find a node
⌕/
No matching nodes
Semantic passport
Verified source
Authored reach
Route probeChoose a start node
Pick two semantic nodes on the diagram
Choose the source, then the destination. Direction matters.
Semantic lensCompare system roles
Choose up to two semantic kinds. One reveals its real traffic; two compare only direct authored relationships.
Choose a kind to inspect its nodes and touching relationships.
Semantic radar
Building overview
Click nodeDrag to pan
Semantic radar needs more MAP space.
What this pipeline does
• Gatekeeper pipeline that runs before any code lands: secret scanning with Gitleaks, Trivy filesystem vulnerability scan, and the full pre-commit suite (ruff, shellcheck, shfmt, hadolint, codespell) inside a dedicated CI image — so no tooling is installed at job runtime.
Job by job
• Build pre-checks container: Build and push the pre-checks CI container with ruff, shellchec…
• Scan for secrets (gitleaks): Scan git history and staged changes for leaked secrets and cre…
• Scan dependencies for CVEs (trivy): Run Trivy filesystem scan and fail on HIGH or CRITICAL…
• Run pre-checks: Run ruff, shellcheck, shfmt, hadolint, and codespell on changed and all fil…