hhimanshu-jha/pre-submission-gatev0.3.0Public
Pre submission gate
One decision and one ordered fix queue for a repository you are about to submit, joined from four independent audits rather than four reports to reconcile by hand at 2am.
Read the full description
Credentials reachable from git history, whether the project location breaks its own build, how the repository reads to a judge opening it cold, and whether a web build inside it loads anywhere else all run as parallel DAG steps. The gate requires exactly one structurally valid answer for every dimension and refuses SHIP on an unknown verdict, incomplete scan, malformed finding, duplicate result or missing result. A repository with no web build reports that dimension NOT APPLICABLE, which is distinct from unanswered. The repository audits are read-only and do not execute project code. The history audit may make an authenticated read-only GitHub metadata request through the caller's existing gh session to report repository visibility; failure to resolve it is reported, not treated as clean.
Before you run it3 local tools
Everything here is checked on your machine when rote inspects the play. This page never learns what you have installed or which credentials you hold.
- ○python3local tool
Requires >=3.8. Run rote play inspect to check your host; unverified versions remain unknown.
- ○gitlocal tool
Must be on your PATH when used. minimum version undeclared.
- ○ghlocal tooloptional
Must be on your PATH when used. minimum version undeclared.
Inputs1, all optional
rote asks for these before running and shows the defaults it will use.
- Repo
repoAbsolute path to the repository you are about to submit. Leave it out and the most recently committed repository under your usual project directories is gated, with the report naming which one it chose. A relative path is never right here: steps run in the play run workspace, not your shell, so it resolves somewhere you did not mean.
optionalstringexample/Users/me/src/my-entrycustom value allowed
What it changes
No write operations are declared in this version's manifest.
Credentials remain in the recipient's local rote vault; this page and the publisher never receive them.
Runtime details
- rote CLIversion 0.62.0 or newer
- Servicesnone declared
- Digest
sha256:80d10ffa64ae09a08a3b177dd0dec47ebf08783b6f6affd3c1df3a9689b41850 - Archive size45948 bytes
- Published2026-09-04T13:49:30.866735+00:00
- Published withrote 0.79.0
Credential values and current readiness remain local. Opening this page never prompts for a credential, opens an authorization browser, or calls a service this play uses.
A play is a published, versioned automation package that runs on your own machine through rote, a free command-line tool. Opening this page installs nothing and runs nothing.