GitHub Actions
Run scans inside your CI pipeline and send results to ThreatVox.
Video walkthrough coming soon
The written steps below cover everything in the meantime.
What you'll learn
- How the GitHub Actions integration works
- Which secrets your repository needs
- How findings flow back into ThreatVox
Step-by-step
- 1
Get the workflow
In Code Intelligence, open the workflow template ThreatVox provides for GitHub Actions.
- 2
Add repository secrets
In your repo settings, add THREATVOX_API_URL and THREATVOX_API_KEY (create the key under Settings → API Keys).
- 3
Commit the workflow
Add the workflow file to your repository. GitHub runs the tools on each triggered run.
- 4
Results flow back
The workflow posts results to ThreatVox, where they appear as findings and can auto-file GitHub issues for critical/high items.