colek42

This is the wrong way to look at the problem. Maybe they should have asked, "Why does our process need to do so many git checkouts?" Why can't you just run the tests where you already checked out the code?

Thank you. Agree, that was not the intention

Using CI as a gate does not scale. We really think you need to push that testing to the local system and use something like pushgate.dev to validate that the agents actually ran the tests and generated provenance.

We kept pushing to GitHub. Pushgate.dev is a gitproxy. It forces your agents to run tests and validates them. We keep the happy path as fast as possible and use Cloudflare's infrastructure for high resilience. Full disclosure: I am the founder of TestifySec; Pushgate is a new product.

Thanks! Early days of pushgate.dev -- Reach out if interested; email in my profile

We are working on something here, pushgate.dev. It forces the agent to run tests; we are also working on adding support for static analysis of bundles using Jev. Onboarding is a bit of a mess right now, but send me a message [email protected] if you are interested.

CI needs to be decentralized, and the agents should run the test and verify the proof. This avoids all those API calls.

I'm working on something that removes CI completely and lets your agents certify their own tests. It is pretty rough right now but I'd love feedback -- pushgate.dev

I really wish they would support SPIFFE/SPIRE

There are ways to do it. Send me a message, and I can make an intro to the person we use.