Quickstart guide

This article describes how to configure a CircleCI CI/CD workflow to automatically upload mobile app binaries to Data Theorem for scanning. 

To automatically upload a mobile binary from CircleCI, a new step should be added at the end of your existing CircleCI workflow to upload the signed application binary (APK or IPA) to Data Theorem.

Step 1: Retrieving the Upload API key

...

      - run:
          name: Submit APK to Data Theorem
          command:
            step1_response=$(curl -X POST -H "Authorization: APIKey ${DT_UPLOAD_API_KEY}"  --data "" https://api.securetheorem.com/uploadapi/v1/upload_init)
            upload_url=$(echo ${step1_response} | cut -f 3 -d" "  | tr -d '"')
            step2_response=$(curl -F file=<path@<path-to-signed-binary> ${upload_url} --retry 3)

...

Save the configuration file and the integration should be ready. You can check the configuration by clicking Save and Run button in the upper right-hand corner (if editing in the CircleCI UI) or by checking the changes in and creating a pull request:

Once the CI/CD uploads are enabled, pre-production scans will be completed automatically. Please note:

...