Templates

CI/CD website audit templates — copy, paste, clear for launch.

GitHub Action workflows, CI gates, and timed playbooks — ready to drop into your repo or launch calendar.

Supabase backend testing (optional)

Provide Supabase credentials to run deeper RLS and cross-tenant isolation probes. Secrets are encrypted at rest and never appear in scan reports.

Expand to add optional Supabase credentials.

CI/CD

GitHub Actions CI gate

Composite action that fails deploys when launch readiness drops below your threshold.

Open YAML

Launch clearance workflow

Copy-paste workflow YAML for main-branch deploy gates.

Open Playbook

Product Hunt playbook

T-48h checklist — OG tags, LCP, trust pages, and re-scan before launch day.

Open Playbook

Hacker News Show HN

Survive the front page click — mobile, HTTPS, and policy pages in one scan.

Open

GitHub Actions workflow

Add to .github/workflows/launch-clearance.yml. Copy the composite action from templates/github-action/.

# .github/workflows/launch-clearance.yml
name: Launch Clearance

on:
  push:
    branches: [main]
  pull_request:
  workflow_dispatch:

jobs:
  launch-audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Launch Auditor gate
        uses: ./.github/actions/launch-audit
        with:
          url: ${{ vars.PRODUCTION_URL }}
          api-key: ${{ secrets.LAUNCH_AUDITOR_API_KEY }}
          min-verdict: cleared_with_notes
          depth: "3"

Action inputs

url
URL to scan before deploy
api-key
API key with scans:create and scans:read scopes
min-verdict
Minimum verdict: ship, fix, block (or cleared variants)
depth
Crawl depth 1–10

Action outputs

scan-id
Completed scan UUID
verdict
cleared, cleared_with_notes, needs_review, or not_cleared
total-score
Overall score 0–100