Demo assets hosted on GitHub Releases
A clean commit pushed through the /push/ path. All validation checks pass, the push waits for review, and is forwarded
upstream on approval.
Note: API approval via admin key is used here for demonstration purposes — approval is normally performed through the dashboard UI.
Push rejected with multiple simultaneous failures — blocked email local-part, blocked commit message (WIP), diff
containing an internal hostname, and a leaked secret detected by secret scanning.
A push through the /proxy/ path. Validation passes, the push waits for review, and is forwarded upstream on approval.
Note: API approval via admin key is used here for demonstration purposes — approval is normally performed through the dashboard UI.
Proxy mode push rejected for a blocked commit message. The error is returned synchronously in the git push response.
Multiple validation failures surfaced together in a single proxy mode response.
Identity verification running against multiple SCM providers (GitHub, GitLab, Codeberg) in a single proxy push. Shows resolved and unresolved identity states per provider.
An admin attempts to approve their own push and is blocked. The UI prevents self-approval regardless of role.
Dashboard overview of all push records with status badges (Forwarded, Approved, Received, Rejected) and identity resolution indicators.
A push that passed all validation checks and is held for human review. Timeline shows: Push received → Validation passed (10 checks) → Blocked — pending review.
The full push detail view showing the diff, reviewer identity, and Approve / Reject controls with an optional reason field.
A rejected push showing the high-level failure summary (5 validation issues) and identity resolution status.
Expanded view of individual validation step failures: blocked email local-part (noreply), blocked commit message
(WIP), diff containing an internal hostname pattern, and a leaked secret detected by secret scanning.
Push rejected because the pusher's token could not be resolved to a known proxy user. The checkUserPermission
validation step fails and the push is blocked with an "Identity not linked" warning.
Admin view of all registered users with email addresses, SCM identity badges, and push activity counters.
Per-user admin page showing email addresses, linked SCM identities (GitHub, GitLab), and push summary stats.
