# LineageLint Release Security Review

> LineageLint Release Security Review is a paid API for AI agents from 47-85-47-24.sslip.io, paid per call via x402, $0.25/call, status unknown (last checked 2026-09-15).

Performs a multi-artifact static security analysis across Dockerfiles, Kubernetes manifests, GitHub Actions, Terraform, IAM policies, CloudFormation, and OpenAPI specs to produce a release gate verdict (PASS/WARN/BLOCK).

## Facts

- Endpoint: POST https://47-85-47-24.sslip.io/v1/release-security-review
- Price: $0.25/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/lineagelint-release-security-review-d6dfd338
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_TTYyj3qC4j-i-CQvX6rtE

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability lineagelint-release-security-review-d6dfd338 -d '<json body>'
```

Example prompt: Run a production release security review on my bundle — it includes a Dockerfile, a Kubernetes manifest, a GitHub Actions workflow, and a Terraform plan — and tell me if anything is blocked, how many critical findings there are, and whether we get a PASS, WARN, or BLOCK verdict.

## When to prefer this

Use this endpoint when you need a unified, multi-artifact release gate that spans container, Kubernetes, CI/CD pipeline, IaC, IAM, and API surface in a single call. Prefer it over single-artifact analyzers (like DockerGuard or IAMGuard in isolation) when your release bundle contains heterogeneous artifact types and you need one consolidated PASS/WARN/BLOCK verdict. Ideal for automated CI/CD pipelines that require a paid, auditable security gate before production deployment.

## Known failure modes

- Unsupported artifact type submitted — analyzer returns no findings for that artifact
- Malformed JSON input causes parsing failure
- Truncated or invalid YAML in GitHub Actions workflow prevents analysis
- Payment not received or insufficient USDC — request rejected before analysis
- Artifact too large or complex — analysis may time out
- Empty artifact bundle — no artifacts to analyze, returns no verdict

## How this service works

An autonomous paid API accepting USDC on Base mainnet.

## Output

A JSON object containing an overall verdict (PASS/WARN/BLOCK), aggregate finding counts broken down by severity (critical/high/medium/low), a per-artifact array with individual verdicts, risk scores, finding counts, analysis IDs, and analyzer versions, plus a coverage metadata block describing what static analysis was and was not performed.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "label": {
   "type": "string",
   "maxLength": 160
  },
  "bundle": {
   "type": "object",
   "properties": {
    "dockerfile": {
     "type": "string"
    },
    "openapi_spec": {
     "type": "object"
    },
    "docker_compose": {
     "type": "object"
    },
    "terraform_plan": {
     "type": "object"
    },
    "aws_iam_policies": {
     "type": "array",
     "items": {
      "type": "object",
      "required": [
       "policy"
      ],
      "properties": {
       "policy": {
        "type": "object"
       },
       "policy_type": {
        "enum": [
         "identity",
         "resource",
         "trust",
         "permissions-boundary",
         "scp"
        ],
        "type": "string"
       }
      },
      "additionalProperties": false
     },
     "maxItems": 8
    },
    "kubernetes_manifests": {
     "oneOf": [
      {
       "type": "object"
      },
      {
       "type": "array"
      }
     ]
    },
    "cloudformation_template": {
     "type": "object"
    },
    "github_actions_workflow": {
     "type": "string"
    },
    "openapi_public_operations": {
     "type": "array",
     "items": {
      "type": "string"
     }
    },
    "terraform_allowed_destroy": {
     "type": "array",
     "items": {
      "type": "string"
     }
    }
   },
   "description": "One or more supported parsed/text release artifacts, at most 2 MB and 12 artifacts total",
   "additionalProperties": false
  },
  "profile": {
   "enum": [
    "production",
    "development"
   ],
   "type": "string",
   "default": "production"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "label": "paid-example:production-release",
  "stats": {
   "findings": 106,
   "verdicts": {
    "PASS": 0,
    "WARN": 0,
    "BLOCK": 8
   },
   "artifact_count": 8,
   "findings_by_severity": {
    "low": 8,
    "high": 52,
    "medium": 26,
    "critical": 20
   }
  },
  "profile": "production",
  "reports": {
   "note": "Full paid response includes each artifact report."
  },
  "summary": "BLOCK: 8 release artifact(s) produced 106 finding(s); 8 blocked, 0 warned, 0 passed.",
  "verdict": "BLOCK",
  "coverage": {
   "mode": "static-multi-artifact-release-gate",
   "limitations": [
    "Static analysis cannot prove runtime reachability, organization policy, or successful rollback.",
    "The report does not replace image vulnerability scans, policy simulation, admission checks, or a sandboxed deployment test."
   ],
   "artifacts_executed": false,
   "supported_artifacts": [
    "Dockerfile",
    "Docker Compose JSON",
    "Kubernetes JSON objects",
    "GitHub Actions YAML",
    "terraform show -json plan",
    "AWS IAM JSON policies",
    "CloudFormation JSON template",
    "OpenAPI 3.x JSON document"
   ],
   "secret_values_returned": false,
   "cloud_credentials_loaded": false,
   "deployment_targets_contacted": false
  },
  "artifacts": [
   {
    "summary": "BLOCK: 12 finding(s) across 1 build stage(s); 9 require resolution or explicit approval.",
    "verdict": "BLOCK",
    "artifact": "dockerfile",
    "findings": 12,
    "risk_score": 100,
    "analysis_id": "docker-0b5e451456f5525b1160",
    "analyzer_version": "dockerguard-dockerfile/1.0"
   },
   {
    "summary": "BLOCK: 16 finding(s) across 1 service(s); 10 require resolution or explicit approval.",
    "verdict": "BLOCK",
    "artifact": "docker_compose",
    "findings": 16,
    "risk_score": 100,
    "analysis_id": "compose-359f68356f8af00fbcdd",
    "analyzer_version": "composeguard-docker-compose/1.0"
   },
   {
    "summary": "2 Kubernetes object(s), 1 workload(s), and 1 container(s) produced 18 finding(s): 2 critical, 12 high, 2 medium, 2 low.",
    "verdict": "BLOCK",
    "artifact": "kubernetes_manifests",
    "findings": 18,
    "risk_score": 100,
    "analysis_id": "kube-7234b7bcdc41df15633a",
    "analyzer_version": "kubeguard-kubernetes-manifest/1.0"
   },
   {
    "summary": "BLOCK: 13 finding(s) across 1 job(s); 9 require resolution or explicit approval.",
    "verdict": "BLOCK",
    "artifact": "github_actions_workflow",
    "findings": 13,
… (truncated)
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/lineagelint-release-security-review-d6dfd338/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from 47-85-47-24.sslip.io](https://www.zero.xyz/host/47-85-47-24.sslip.io/llms.txt)