...
Integrating into a CI/CD pipeline
GitHub
...
Action
A Github Action for API scanning is available at https://github.com/marketplace/actions/data-theorem-api-secure.
Other CI/CD platforms
Most CI/CD platforms (Travis CI, CircleCI, etc.) allow running a bash script as a step within the CI pipeline.
The following file is an example of a GitHub workflow that will trigger an API scan every time the repository is tagged with a new version. A similar workflow can be configured on other CI/CD platforms.
To setup this the workflow:
Create a new secret containing your API key (called
DATATHEOREM_API_KEYin the below example).Create a new workflow by creating a file at
.github/workflows/datatheorem.yamlwith the following content:
...