Deep Quality Lane #307

	name: Deep Quality Lane

	on:
	schedule:
	- cron: '35 3 * * *'
	workflow_dispatch:

	permissions:
	contents: read

	env:
	NODE_VERSION: 24.14.0
	PNPM_VERSION: 10.28.2
	SEMGREP_VERSION: 1.159.0

	jobs:
	deep-quality:
	runs-on: ubuntu-latest
	timeout-minutes: 30
	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Setup pnpm
	uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
	with:
	version: ${{ env.PNPM_VERSION }}

	- name: Setup Node
	uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
	with:
	node-version: ${{ env.NODE_VERSION }}
	cache: 'pnpm'

	- name: Install dependencies
	run: pnpm install

	- name: Setup Python
	uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
	with:
	python-version: '3.12'

	- name: Install Semgrep
	run: \|
	python -m pip install --upgrade pip
	python -m pip install semgrep==${{ env.SEMGREP_VERSION }}

	- name: AI slop policy check
	run: pnpm ai:slop-check

	- name: Semgrep scan
	run: bash .github/scripts/ci/run-semgrep.sh

	- name: Dead code check
	run: pnpm deadcode:check

	- name: Dependency graph hygiene check
	run: pnpm deps:graph:check

	- name: Dependency dedupe check
	run: pnpm deps:dedupe:check

	- name: Dependency audit (high severity and above)
	run: pnpm deps:audit

Navigation Menu