audit-labs/gh-attest

GitHub Audit Evidence Extractor attestation audit evidence github https://audit-labs.dev/gh-attest/

Commit 513e0ec7b0

513e0ec7b070c5db98e3522b304ab8957e434409

parent: 2aae6e08f7

Unsigned

cmc <hello@cleberg.net> · 2026-07-20 16:16 UTC 

Add SonarCloud and licence badges to the README

Matches the badge style used in zerolabsco/hutch: quality gate and the
three SonarCloud ratings, plus a licence badge.

Coverage is deliberately omitted — with no test suite that badge renders
"Measure has not been found", which looks worse than not having one.
There is also no build badge, since Cloudflare Workers Builds exposes no
public status endpoint.

All five image URLs and their link targets were checked and return 200.

Layout: unified · split

README.md +6
@@ -1,5 +1,11 @@
1# gh-attest 1# gh-attest
2 2
3[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=audit-labs_gh-attest&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=audit-labs_gh-attest)
4[![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=audit-labs_gh-attest&metric=security_rating)](https://sonarcloud.io/summary/new_code?id=audit-labs_gh-attest)
5[![Reliability Rating](https://sonarcloud.io/api/project_badges/measure?project=audit-labs_gh-attest&metric=reliability_rating)](https://sonarcloud.io/summary/new_code?id=audit-labs_gh-attest)
6[![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=audit-labs_gh-attest&metric=sqale_rating)](https://sonarcloud.io/summary/new_code?id=audit-labs_gh-attest)
7[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](LICENSE)
8
3Turns GitHub security settings into auditor-ready evidence. A GitHub App that 9Turns GitHub security settings into auditor-ready evidence. A GitHub App that
4records branch protection, scanning alerts, and organization access as they 10records branch protection, scanning alerts, and organization access as they
5change, maps them to SOC 2 and ISO 27001 controls, and exports point-in-time 11change, maps them to SOC 2 and ISO 27001 controls, and exports point-in-time