⚙️

CI/CD Build Pipeline

Our 13-step pipeline ensures every release is tested, scanned, and verified before reaching production.

▶

START

Write Code & Tests

TypeScript · Astro · Tailwind CSS · Playwright · Kiro IDE

Compile & Type Check ⛔ GATE

Astro Build · TypeScript Compiler · Vite

Run Tests & Playwright ⛔ GATE

Playwright · Nova Act (AI QA) · Axe Accessibility

Code Review ⛔ GATE

SonarQube · ESLint · Cubic AI Review

Evaluation Checkmarx SAST ⏭️ DISABLED

Checkmarx · OWASP Top 10 · Secret Detection — Account not configured

Scout QA ⛔ GATE

ScoutQA · Visual Regression · Link Checker

Evaluation SonarQube Quality Gate ⏭️ DISABLED

SonarQube · Coverage · Technical Debt — MCP server not connected

Aikido Security 🛡️ SECURITY

Aikido SAST · Secrets Scan · IaC Scan

Production Build

Astro Build · Vite · Tailwind CSS · Cloudflare Images

Deploy to Staging

Cloudflare Workers · Wrangler CLI · staging.xconvert24.com

Post-Deploy Tests ⛔ GATE

Nova Act · pytest · 80+ Browser Tests

Deploy to Production

Cloudflare Workers · Global CDN · D1 Database · 300+ PoPs

Post-Live Tests ⛔ GATE

Nova Act · Playwright · Full Site Certification

🌟 GOLDEN

All tests passed — site certified

Steps

Gates

Security

12+

Tools

🗺️ Future Roadmap — Pipeline Enhancements

📊

SonarQube Quality Gate

Deep code quality analysis — code smells, technical debt, coverage metrics, duplication percentage. Requires Docker + SonarQube Cloud account setup.

Status: Awaiting Docker + Cloud auth configuration

🛡️

Checkmarx SAST Scan

Static Application Security Testing — SQL injection, XSS, insecure dependencies, hardcoded secrets, OWASP Top 10 coverage.

Status: Awaiting Checkmarx One account + API key

🔬

Scout QA (AI Exploratory Testing)

AI-powered exploratory testing that finds visual regressions, broken links, and UX issues that scripted tests miss.

Status: Evaluating integration options

xConvert24.com v1.23.0

Built 06 Aug 2026 · Astro 6.4 · Cloudflare Workers · Node 24