Bulwark is a Go CLI that unifies code-quality and security scanning — SAST, SCA, linting, and coverage gates — for Rust, TypeScript, and Go projects, running identically locally and in CI via reusable GitHub Actions workflows.