From 3d742a3df81ab1fba1687b80a3a103673ced68c3 Mon Sep 17 00:00:00 2001 From: abdouladieng Date: Sun, 5 Jul 2026 18:53:56 +0000 Subject: [PATCH] docs(ci): document that this pipeline is the required merge gate Add a header comment noting the workflow is the secure-validation-gate status check enforced by main's branch-protection ruleset. This also serves to exercise the gate end-to-end on a change under a watched path. --- .github/workflows/devsecops-pipeline.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/devsecops-pipeline.yml b/.github/workflows/devsecops-pipeline.yml index aece31d..a048a73 100644 --- a/.github/workflows/devsecops-pipeline.yml +++ b/.github/workflows/devsecops-pipeline.yml @@ -1,5 +1,10 @@ name: "DevSecOps: Ephemeral Parallel Validation Engine" +# This pipeline is the required status check (secure-validation-gate) enforced by +# main's branch-protection ruleset: every pull request must pass it end-to-end +# — static scans, build/SCA, ephemeral AWS deploy, OWASP ZAP DAST, teardown — +# before it can be merged into main. + on: pull_request: branches: [ "main" ]