Shipping Pipeline

/lavra-ship

Code-ready to PR-open. Fully automated. Pre-flight checks, tests, security scan, PR creation, and knowledge capture in one command.

Six-phase pipeline

Each phase runs sequentially. If any phase fails, the pipeline stops and reports what went wrong.

Phase 1

Pre-flight

Branch safety, uncommitted changes

Phase 2

Sync

Fetch & rebase on main

Phase 3

Tests

Auto-detect runner, run suite

↓
Phase 6

Close beads

Capture knowledge, close with PR link

Phase 5

Open PR

Generate title, summary, test results

Phase 4

Security scan

Secrets, debug leftovers, hardcoded values

PR #142 opened -- 3 beads closed -- knowledge captured

What the security scan catches

• Hardcoded secrets and API keys
• Debug statements (console.log, debugger, binding.pry)
• TODO/FIXME/HACK comments left behind
• Unvalidated user input
• Exposed internal endpoints
• Dependency vulnerabilities

From code to PR.
Zero manual steps.

Tests. Security. PR. Knowledge. All automated.