validate

SDLC Compliance Check

Perform a comprehensive compliance check of the current project against SDLC requirements.

Process

1. Detect Project Type

First, identify the project's language and framework:

# Check for language indicators
ls Cargo.toml package.json pyproject.toml pom.xml build.gradle go.mod 2>/dev/null

2. Run Domain Checks

Check each SDLC domain for compliance. Use the specialized agents if available, or perform checks directly.

Build System Check

• Makefile exists with standard targets
• Build configuration present
• make build works
• make test works
• make lint works
• make format works

# Verify Makefile targets
make -n build test lint format clean 2>/dev/null && echo "✓ Makefile targets OK" || echo "✗ Makefile missing targets"

Code Quality Check

• Formatter configured
• Linter configured
• Format check passes
• Lint check passes

# Run format check
make format-check 2>/dev/null || echo "Format check failed or not configured"

# Run lint
make lint 2>/dev/null || echo "Lint failed or not configured"

Testing Check

• Tests exist
• Tests pass
• Coverage configured

# Run tests
make test 2>/dev/null || echo "Tests failed or not configured"

CI/CD Check

• Workflow file exists
• Required jobs present
• Actions pinned
• Caching configured

# Check CI workflow
ls .github/workflows/ci.yml .github/workflows/ci.yaml 2>/dev/null || echo "✗ No CI workflow found"

# Check for pinned actions
grep -E "uses:.*@v[0-9]" .github/workflows/*.yml 2>/dev/null | head -5

Security Check

• Vulnerability scanning configured
• License compliance defined
• SECURITY.md exists

# Check security config
ls SECURITY.md 2>/dev/null || echo "✗ SECURITY.md missing"
ls cargo-deny.toml .cargo/audit.toml 2>/dev/null  # Rust
ls .npmrc package.json 2>/dev/null | xargs grep -l "audit" 2>/dev/null  # Node