waysregistry
DocsGitHub
registry
incu/incu-wayfamily

Incuway

The incuway family — the gated feature, bug and security flows as member ways, plus the shared onboarding, docs, refinement and assessment skills, the state contract, and the baseline conventions, installed as one.

developmentconformant — validation tier: Passes the conformance rules: real gates, documents and state are declared.byincuv2.0.01 install
$ npx ways.sh add github:incu-tech/incuway
registry nameincu/incu-way
pinneded7bee6bc2 · way.yaml

Members

spec.members — 3 member ways
A family — installed as one command, but each member way keeps its own flow and its own gate model.
Incu Developmentincu/devv1.3.08 phases · 5 gatesways/incu-dev
01

Discovery & intake

discovery
02

PRD

prd
PRD.mdrequireddocs/prds/{slug}/PRD.md
PRD reviewgate: prd
blockingneeds your approval
03

Implementation plan

plan
PLAN.mdrequireddocs/prds/{slug}/PLAN.md
Plan reviewgate: plan
blockingneeds your approvalwaits for: prd
04

Implementation

implementation
05

Validation & scans

validation
TESTING.mddocs/prds/{slug}/TESTING.md
User testinggate: testing
blockingneeds your approvalwaits for: plan
06

PR feat→develop

pr-develop
PR feat→developgate: pr-develop
blockingneeds your approvalwaits for: testing
07

PR develop→main

pr-main
PR develop→maingate: pr-main
blockingneeds your approvalwaits for: pr-develop
08

Done

done

this member needs, on top of what the family shares

Capability slots

spec.needs — bind to your tools

Version-control hostvcs-host
ways.dev/vcs-host@1

Hosts the repo and PRs — where this way opens and gates pull requests.

githubgitlabbitbucket

declared by the way

Static application security testingsast
ways.dev/sast@1

Scans first-party code for vulnerabilities in the validation phase.

snyksemgrep

declared by the way

Software composition analysissca
ways.dev/sca@1

Scans dependencies for known vulnerabilities in the validation phase.

snyk

declared by the way

Code quality analysiscode-quality
ways.dev/code-quality@1

Static quality scan (bugs, code smells) required by the validation checklist.

sonarqube

declared by the way

Requires

spec.requires — checked by ways doctor

gitmustgit --version
ghmustgh --version · >=2.0.0

Payload

skills & knowledge placed on install

dev-conventionsrule
Incu Bug Fixingincu/bugsv1.3.09 phases · 2 gatesways/incu-bugs
01

Discovery & intake

discovery
02

Document the bug

document
BUG.mdrequireddocs/bugs/{slug}/BUG.md
03

Root-cause analysis

analysis
ANALYSIS.mdrequireddocs/bugs/{slug}/ANALYSIS.md
04

Reproduction test

reproduction
05

Fix plan

fix-plan
FIX_PLAN.mdrequireddocs/bugs/{slug}/FIX_PLAN.md
Fix plan confirmationgate: fix-plan
blockingneeds your approval
06

Fix

implementation
07

Validation & scans

validation
08

PR

pr
PR reviewgate: pr
blockingneeds your approvalwaits for: fix-plan
09

Done

done

this member needs, on top of what the family shares

Capability slots

spec.needs — bind to your tools

Version-control hostvcs-host
ways.dev/vcs-host@1

Hosts the repo and PRs — where this way opens and gates pull requests.

githubgitlabbitbucket

declared by the way

Static application security testingsast
ways.dev/sast@1

Scans first-party code for vulnerabilities in the validation phase.

snyksemgrep

declared by the way

Software composition analysissca
ways.dev/sca@1

Scans dependencies for known vulnerabilities in the validation phase.

snyk

declared by the way

Code quality analysiscode-quality
ways.dev/code-quality@1

Static quality scan (bugs, code smells) required by the validation checklist.

sonarqube

declared by the way

Requires

spec.requires — checked by ways doctor

gitmustgit --version
ghmustgh --version
Incu Security Remediationincu/securityv1.0.08 phases · 5 gatesways/incu-security
01

Intake & scan

scan
02

Findings report

findings
FINDINGS.mdrequireddocs/security/{slug}/FINDINGS.md
Scope confirmationgate: scope
blockingneeds your approval
03

Remediation plan

plan
PLAN.mdrequireddocs/security/{slug}/PLAN.md
Plan approvalgate: plan
blockingneeds your approvalwaits for: scope
04

Fix per finding

implementation
05

Re-scan & resolution

validation
RESOLUTION.mdrequireddocs/security/{slug}/RESOLUTION.md
Validation sign-offgate: resolution
blockingneeds your approvalwaits for: plan
06

PR fix→develop

pr-develop
PR fix→developgate: pr-develop
blockingneeds your approvalwaits for: resolution
07

PR develop→main

pr-main
PR develop→maingate: pr-main
blockingneeds your approvalwaits for: pr-develop
08

Done

done

this member needs, on top of what the family shares

Capability slots

spec.needs — bind to your tools

Version-control hostvcs-host
ways.dev/vcs-host@1

Hosts the repo and PRs — where this way opens and gates the remediation pull requests.

githubgitlabbitbucket

declared by the way

Static application security testingsast
ways.dev/sast@1

Produces the first-party code findings this flow triages, remediates and re-scans.

snyksemgrep

declared by the way

Software composition analysissca
ways.dev/sca@1

Produces the dependency findings this flow triages, remediates and re-scans.

snyk

declared by the way

Requires

spec.requires — checked by ways doctor

gitmustgit --version
ghmustgh --version · >=2.0.0

Bind & require

what it needs from your environment

Capability slots

spec.needs — bind to your tools

Version-control hostvcs-host
ways.dev/vcs-host@1

Hosts the repo and PRs — where incu-way-prepare-pr opens and gates pull requests for every flow.

githubgitlabbitbucket

needed by: incu-way-development, incu-way-bugs, snyk-remediation, incu-way-init, incu-way-docs, incu-way-po, incu-way-arch-assessment, incu-way-security-validation, incu-way-threat-model, incu-way-prepare-pr

Static application security testingsast
ways.dev/sast@1

Scans first-party code for vulnerabilities in each flow's validation phase.

snyksemgrep

needed by: incu-way-development, incu-way-bugs, snyk-remediation

Software composition analysissca
ways.dev/sca@1

Scans dependencies for known vulnerabilities in each flow's validation phase.

snyk

needed by: incu-way-development, incu-way-bugs, snyk-remediation

Code quality analysiscode-quality
ways.dev/code-quality@1

Static quality scan (bugs, code smells) required by the validation checklists.

sonarqube

needed by: incu-way-development, incu-way-bugs

Requires

spec.requires — checked by ways doctor

gitmustgit --version
ghmustgh --version · >=2.0.0

Payload

skills & knowledge placed on install

developmentuses vcs-host, sast, sca, code-quality
bugsuses vcs-host, sast, sca, code-quality
snyk-remediationuses vcs-host, sast, sca
inituses vcs-host
docsuses vcs-host
pouses vcs-host
arch-assessmentuses vcs-host
security-validationuses vcs-host
threat-modeluses vcs-host
prepare-pruses vcs-host
state-contractrule
securityrule
branch-flowrule

Source

indexed, not hosted
repohttps://github.com/incu-tech/incuway
refmain
commited7bee6bc22b86e07e52542774ec3a4dc696ccef
manifestway.yaml
validated