New product — CI Gate Templates Pack
Block high-risk AI code changes in your CI pipeline.
11 ready-to-use CI/CD templates that catch dependency changes, secret leaks, config drift, and missing tests before they reach production. Drop in, configure, and push — your pipeline blocks high-risk AI diffs automatically.
One pack, every platform — $7 one-time
CI Gate Templates Pack
- GitHub Actions — full risk gate (PR comments, status checks, artifacts)
- GitHub Actions — minimal pass/fail gate
- GitHub Actions — multi-repo batch audit
- GitLab CI — MR pipeline with comment posting
- Jenkins — declarative pipeline with report archiving
- CircleCI — approval workflow integration
- Git pre-receive hook (server-side)
- Git pre-commit hook (local)
- Configurable risk policy (ci-policy.json)
- Slack notification template
- MS Teams notification template
- Quick start guide
- Commercial license
Gumroad checkout with hosted file delivery. Product page visible; file delivery available after Gumroad publishing is finalized.
Compare: setting up CI risk gates from scratch takes hours per platform. This pack gives you production-ready templates for 6 platforms in under 30 seconds.
What's in the pack
How it works
# 1. Unzip the pack
unzip CI_Gate_Templates_Pack.zip
# 2. Copy the template for your platform
cp github-actions-risk-gate.yml .github/workflows/risk-gate.yml
# or: cp gitlab-ci-risk-gate.yml >> .gitlab-ci.yml
# or: cp jenkinsfile-risk-gate Jenkinsfile
# 3. (Optional) Customize risk policy
# Edit ci-policy.json to set your thresholds:
# - max_risk_score: 60
# - fail_on_flags: POSSIBLE_SECRET_LITERAL_IN_DIFF
# - allowlist_paths: README.md, docs/
# 4. Commit and push
# Your CI pipeline now blocks high-risk AI diffs automatically
Works standalone
Every template includes structural gating logic (exit code handling, comment posting, artifact archiving) that works even without the AI Agent Change Risk Audit Kit. Replace the python agent_change_risk_auditor.py audit step with your own risk analysis command, and the template still blocks, warns, and reports correctly.
For full AI-agent diff risk detection, pair these templates with the AI Agent Change Risk Audit Kit.
Platform comparison
| Feature | GitHub Actions | GitLab CI | Jenkins | CircleCI | Git Hooks |
|---|---|---|---|---|---|
| PR/MR comments | ✅ | ✅ | ❌ | ❌ | N/A |
| Status checks | ✅ | ✅ | ✅ | ✅ | N/A |
| Artifact archiving | ✅ | ✅ | ✅ | ✅ | N/A |
| Approval workflow | ❌ | ❌ | ❌ | ✅ | N/A |
| Push blocking | ❌ | ❌ | ❌ | ❌ | ✅ |
| Configurable policy | ✅ | ✅ | ✅ | ✅ | ✅ |
| Notification templates | ✅ | ✅ | ✅ | ✅ | ✅ |
Standalone vs Audit Kit pairing
| Feature | Standalone templates | With Audit Kit |
|---|---|---|
| CI pipeline structure | ✅ Ready to use | ✅ Ready to use |
| Exit code gating | ✅ Custom command | ✅ Built-in risk scoring |
| Risk flag detection | ⚠️ Your own logic | ✅ 8 flag types included |
| Risk score calculation | ⚠️ Your own scoring | ✅ 0-100 score with thresholds |
| Secret detection | ⚠️ Add your own | ✅ Secret literal patterns |
| PR comment automation | ✅ Template included | ✅ Filled with real data |
| Notification templates | ✅ Included | ✅ Included |
FAQ
- Do I need the Audit Kit to use these templates?
- No. Every template works standalone. Replace the audit step with your own risk analysis command and the gating, reporting, and notification logic still works.
- Which CI platforms are supported?
- GitHub Actions, GitLab CI, Jenkins, and CircleCI. Plus server-side pre-receive hooks and local pre-commit hooks that work with any Git platform.
- Can I customize the risk thresholds?
- Yes. Edit
ci-policy.jsonto set max risk scores, flag severities (warn vs fail), and path allowlists/blocklists. - How do notifications work?
- The Slack and Teams templates are JSON payloads you POST to your webhook URLs. Fill in your repository name, risk level, and commit details — or use the Audit Kit to fill them automatically.
- What license applies?
- Commercial use license — use in unlimited personal and commercial projects. Resale or redistribution of the templates themselves is not permitted.
- Is there a refund policy?
- Contact us within 14 days for a full refund. No questions asked.
Compliance note
These templates are CI/CD pipeline configurations, not security tools. They help automate review workflows but do not guarantee security, bug prevention, or vulnerability detection. Always run your own security scans and code review.