Repos & services
Active repos
Section titled “Active repos”| Repo | What it is | Language | Deployed as |
|---|---|---|---|
| tappass/tappass | Core governance server | Python 3.12 / FastAPI / OPA / Postgres | Cloud Run (staging, prod) |
| tappass/tappass-sdk | Python client SDK | Python 3.10+ | PyPI (tappass) |
| tappass/license-server | Airgapped license activation | Python 3.12 / FastAPI / SQLite | Self-hosted, outbound via CF Tunnel |
| tappass/assess | Pre-sale GitHub risk scanner | Python 3.11 / FastAPI / WeasyPrint | Cloud Run |
| tappass/tappass-examples | Integration examples | Python / Docker / K8s | — (read-only reference) |
| tappass/docs | Public docs | Astro / Starlight | Cloudflare Pages → docs.tappass.ai |
| tappass/docs-internal | This site | Astro / Starlight | Cloudflare Pages + Access → internal-docs.tappass.ai |
| tappass/tappass.ai | Marketing site | Static HTML / Python generator | Cloudflare Pages → tappass.ai |
| tappass/trust.tappass.ai | Trust center (DPA, DPIA, subprocessors) | Static | Cloudflare Pages → trust.tappass.ai |
| tappass/working-assets | Decks, brand, strategy, demos | — | Private, not deployed |
Cross-repo conventions
Section titled “Cross-repo conventions”- No shared code between repos. Integration happens over HTTP (SDK → server, assess → GitHub).
- SDK is the public API surface. If a change affects the SDK, it also affects every customer — handle with care.
- Examples mirror the SDK. If you change an SDK method, update
tappass-examples/too. - Each repo has its own CI/CD and deploy pipeline — see Deployments.
Services (runtime)
Section titled “Services (runtime)”| Service | Home | Observability |
|---|---|---|
| Core governance server (prod) | Cloud Run app.tappass.ai | Grafana + Postgres audit tables |
| Core governance server (staging) | Cloud Run staging.tappass.ai | Same stack, staging project |
| License server | Self-hosted, Cloudflare Tunnel | Local + CF analytics |
| Assess scanner | Cloud Run | Sentry |
| Docs | Cloudflare Pages | CF analytics |