Plumber - Website

The website for Plumber, the open-source CI/CD security CLI and platform for GitLab CI/CD and GitHub Actions, built with Astro, Tailwind CSS, and React.

Plumber CLI (the product this site documents):

Badge notes: Plumber Score and OpenSSF Scorecard grade this repository itself: the first is Plumber dogfooding its own GitHub Action against these workflows (threshold 90, see the Plumber badge for the run), the second is the OpenSSF supply-chain posture score published weekly by scorecard.yml. Security Scan runs npm audit daily; it turns red as soon as a published CVE affects one of this site’s dependencies (advisories with no patched release are allowlisted in .github/npm-audit-allowlist.json, each with an expiry date). CodeQL is GitHub’s static analysis on every PR, push to main, and weekly. PRs additionally run Dependency Review, which blocks introducing dependencies with known vulnerabilities (no badge: it never runs on main).

Summary of this README

| Section | |…