audit-labs/gh-attest

GitHub Audit Evidence Extractor

clone: git clone https://gitbay.org/audit-labs/gh-attest.git

c69161f3078b5f2852447fd96a4ace99ea88ba80

verified · cmc

author: Christian Cleberg <hello@cleberg.net> · 2026-07-20T16:16:45Z

Add SonarCloud and licence badges to the README

Matches the badge style used in zerolabsco/hutch: quality gate and the
three SonarCloud ratings, plus a licence badge.

Coverage is deliberately omitted — with no test suite that badge renders
"Measure has not been found", which looks worse than not having one.
There is also no build badge, since Cloudflare Workers Builds exposes no
public status endpoint.

All five image URLs and their link targets were checked and return 200.

 README.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/README.md b/README.md
index 286a5fe..b48b9b7 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,11 @@
 # gh-attest
 
+[![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=audit-labs_gh-attest&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=audit-labs_gh-attest)
+[![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=audit-labs_gh-attest&metric=security_rating)](https://sonarcloud.io/summary/new_code?id=audit-labs_gh-attest)
+[![Reliability Rating](https://sonarcloud.io/api/project_badges/measure?project=audit-labs_gh-attest&metric=reliability_rating)](https://sonarcloud.io/summary/new_code?id=audit-labs_gh-attest)
+[![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=audit-labs_gh-attest&metric=sqale_rating)](https://sonarcloud.io/summary/new_code?id=audit-labs_gh-attest)
+[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](LICENSE)
+
 Turns GitHub security settings into auditor-ready evidence. A GitHub App that
 records branch protection, scanning alerts, and organization access as they
 change, maps them to SOC 2 and ISO 27001 controls, and exports point-in-time