Pushproof - audit a .gitlab-ci.yml before you push it, then rewrite it with the fixes

Paste a .gitlab-ci.yml (and the local files it includes). Your browser resolves anchors, extends and default: like GitLab and flags undeclared stages, broken needs/extends, rules mixed with only/except, production deploys any branch can run, terraform -auto-approve, secrets in the file, curl|sh, TLS off, :latest images and deploys without resource_group - free. Then an audit gives the corrected block per finding, or a rewrite returns the whole file fixed and re-checked. Not affiliated with or endorsed by GitLab Inc. Derived from @wshobson/gitlab-ci-patterns (MIT) and @akin-ozer/gitlab-ci-generator (Apache-2.0).