CI/CD Security Scanning and Quality Gates

🛠 Lab from the Platform Engineering Bootcamp. Used in Week 3. Bootcamp landing page: https://academy.tekanaid.com/bootcamps/platform-engineering-bootcamp Parent course(s):

• Week 3: Git, GitHub & CI/CD Fundamentals (slug: git-github-cicd-fundamentals)

🟡 Beta bootcamp lab. Hands-on instructions, check scripts, and solve scripts are in place. Lab is part of the running TaskFlow project that grows across all 21 weeks of the bootcamp.

In this lab you add security scanning and a required quality gate to the real CI pipeline you built for your TaskFlow fork. You audit the real frontend's dependencies with npm audit, automate that scan with a scheduled GitHub Actions workflow and Dependabot, then require a quality gate check on every pull request with branch protection, proving it blocks a broken build before you fix it and merge.

You'll learn to:

• Audit real npm dependencies and separate production risk from dev-tooling noise
• Automate dependency scanning with a scheduled GitHub Actions workflow and Dependabot
• Require a quality gate check via GitHub branch protection on your own fork
• Prove the gate works by pushing a broken build, watching it get blocked, then fixing and merging it

Builds on Your First GitHub Actions CI Pipeline and completes your automated quality pipeline.