CI/CD Integration

Automate security scanning in your CI/CD pipelines to catch vulnerabilities before they reach production. Rafter integrates seamlessly with all major CI/CD platforms.

Write Scripts to Scan and Report

Add the scan command to your pipeline. The script below only fails on error level vulnerabilities:
#!/bin/bash
# scan-and-report.sh

# Run scan and capture results
RESULTS=$(rafter run --quiet --format json)

# Check for critical vulnerabilities (or any other severity)
CRITICAL_COUNT=$(RESULTS | jq '.vulnerabilities | map(select(.level=="error")) | length')

if [ $CRITICAL_COUNT -gt 0 ]; then
    echo "Found $CRITICAL_COUNT critical vulnerabilities!"
    exit 1
else
    echo "No critical vulnerabilities found"
fi
See the advanced guide and automation techniques below for more script examples.

GitHub Actions

Next Steps