|
| 1 | +# CI/CD Integration |
| 2 | + |
| 3 | +EasyAudit integrates with all major CI/CD platforms for automated code scanning. Results can be viewed as artifacts or integrated with platform-specific security dashboards. |
| 4 | + |
| 5 | +--- |
| 6 | + |
| 7 | +## Supported Platforms |
| 8 | + |
| 9 | +| Platform | Config File | Documentation | |
| 10 | +|----------|-------------|---------------| |
| 11 | +| GitHub Actions | `.github/workflows/*.yml` | [github-actions.md](ci-cd/github-actions.md) | |
| 12 | +| GitLab CI | `.gitlab-ci.yml` | [gitlab-ci.md](ci-cd/gitlab-ci.md) | |
| 13 | +| Bitbucket Pipelines | `bitbucket-pipelines.yml` | [bitbucket-pipelines.md](ci-cd/bitbucket-pipelines.md) | |
| 14 | +| Azure DevOps | `azure-pipelines.yml` | [azure-devops.md](ci-cd/azure-devops.md) | |
| 15 | +| CircleCI | `.circleci/config.yml` | [circleci.md](ci-cd/circleci.md) | |
| 16 | +| Jenkins | `Jenkinsfile` | [jenkins.md](ci-cd/jenkins.md) | |
| 17 | +| Travis CI | `.travis.yml` | [travis-ci.md](ci-cd/travis-ci.md) | |
| 18 | + |
| 19 | +--- |
| 20 | + |
| 21 | +## Quick Example (GitHub Actions) |
| 22 | + |
| 23 | +```yaml |
| 24 | +name: EasyAudit |
| 25 | + |
| 26 | +on: [push, pull_request] |
| 27 | + |
| 28 | +jobs: |
| 29 | + scan: |
| 30 | + runs-on: ubuntu-latest |
| 31 | + container: |
| 32 | + image: ghcr.io/crealoz/easyaudit:latest |
| 33 | + steps: |
| 34 | + - uses: actions/checkout@v4 |
| 35 | + - run: easyaudit scan --format=sarif --output=report.sarif . |
| 36 | + - uses: github/codeql-action/upload-sarif@v3 |
| 37 | + with: |
| 38 | + sarif_file: report.sarif |
| 39 | +``` |
| 40 | +
|
| 41 | +--- |
| 42 | +
|
| 43 | +## Output Formats |
| 44 | +
|
| 45 | +| Format | Use Case | |
| 46 | +|--------|----------| |
| 47 | +| `sarif` | GitHub Code Scanning, GitLab SAST | |
| 48 | +| `json` | Custom tooling, artifacts | |
| 49 | +| `text` | Console output, logs | |
| 50 | + |
| 51 | +--- |
| 52 | + |
| 53 | +## Exit Codes |
| 54 | + |
| 55 | +| Code | Meaning | |
| 56 | +|------|---------| |
| 57 | +| 0 | No issues found | |
| 58 | +| 1 | Warnings found | |
| 59 | +| 2 | Errors found | |
| 60 | + |
| 61 | +Use exit codes to fail builds on critical issues. |
| 62 | + |
| 63 | +--- |
| 64 | + |
| 65 | +## Auto-Detection |
| 66 | + |
| 67 | +EasyAudit automatically detects CI environments and adds metadata to API requests. Supported detection: |
| 68 | + |
| 69 | +- `GITHUB_ACTIONS` → GitHub |
| 70 | +- `GITLAB_CI` → GitLab |
| 71 | +- `BITBUCKET_PIPELINE_UUID` → Bitbucket |
| 72 | +- `TF_BUILD` → Azure DevOps |
| 73 | +- `CIRCLECI` → CircleCI |
| 74 | +- `JENKINS_URL` → Jenkins |
| 75 | +- `TRAVIS` → Travis CI |
| 76 | + |
| 77 | +--- |
| 78 | + |
| 79 | +## See Also |
| 80 | + |
| 81 | +- [CLI Usage](cli-usage.md) - Command-line options |
| 82 | +- [Processors](processors.md) - Available checks |
| 83 | +- [Automated PR (paid)](request-pr.md) - Auto-fix via API |
| 84 | + |
| 85 | +--- |
| 86 | + |
| 87 | +[Back to README](../README.md) |
0 commit comments