check-qa Before SFTP Deploy — Gates That Block Broken Ships
Woodpecker already runs Gitleaks, Trivy, lint, and vite build before deploy. check-qa.cjs is the step that asks: is dist/ actually safe to put on production? It runs inside the build step after npm run build and fails the pipeline if anything regressed — before SFTP touches IONOS.
The prerender article explains how static HTML snapshots get generated. This one explains what CI refuses to ship if those snapshots — or favicons, or robots.txt — are wrong.
check-qa.cjs is a Node script with named stages: build directory exists, index.html integrity, SEO and metadata tags, core assets on disk, broken local references in HTML/CSS/JS, locale flag images, prerendered route snapshots, robots.txt rules, and llms.txt format.