Phase 2: Static Analysis & Automated Gates · 55 min · Python · Ruff · Semgrep

Building the Automated Gauntlet

Green, yellow, red. The code never reaches a human until the gauntlet speaks.

Hiring signal: Engineers who can compose lint + SAST + dependency scan + AI review into a pre-PR pipeline with green/yellow/red lanes demonstrate CI/CD engineering and quality gate design skills that teams using AI at scale need.

What you will learn

Compose lint + SAST + dependency scan + AI review into a pre-PR pipeline
Implement the green/yellow/red lane classification system
Apply the 10-point AI code review checklist
Design pipeline architecture with parallel and sequential execution stages

The Problem

You have 75+ AI-assisted PRs per day. Each PR needs linting, SAST, dependency scanning, and AI review. Running these sequentially takes 15+ minutes per PR. Running them in parallel takes 3 minutes but you need to compose the results into a single pass/fail decision.

The automated gauntlet is the pre-PR pipeline that runs all verification layers and classifies each PR into a lane: green (auto-merge eligible), yellow (needs human review), or red (blocked, cannot merge).

The Green/Yellow/Red Lane System

Lane	Criteria	Action	Human review needed?
Green	All checks pass, quality score >= 70, no security findings	Auto-merge eligible	Optional (spot check)
Yellow	All critical checks pass, quality score 50-69, minor findings	Human review required	Yes
Red	Any critical check fails, quality score < 50, security findings	Blocked, cannot merge	Developer must fix first

The gauntlet runs before human review
The gauntlet is not a replacement for human review -- it's a filter. Green-lane PRs can be auto-merged (with spot checks). Yellow-lane PRs need human review but the reviewer knows the code passed all automated checks. Red-lane PRs never reach the reviewer -- the developer must fix the issues first. This reduces human review burden by 60-80% because red-lane PRs are caught automatically and green-lane PRs only need spot checks.

Unlock the full lesson

You've read the first 2 sections. The rest of this lesson covers Pipeline Architecture, The 10-Point AI Code Review Checklist, Build It — plus a hands-on lab, quiz, and project artifact.

Create a free account to unlock Phase 0 and Phase 1 of every course — no credit card.