Skip to content

02-ci-integration.md

Latest commit

 

History

History
29 lines (25 loc) · 878 Bytes

02-ci-integration.md

File metadata and controls

29 lines (25 loc) · 878 Bytes
Raw

02 — CI integration

AuthProbe is designed to gate a build.

GitHub Actions

- name: Start API (example)
  run: docker compose up -d target && sleep 3
- name: AuthProbe
  run: |
    pip install authprobe
    authprobe scan --config authprobe.yaml \
      --format console junit --out out/ --fail-on high
- name: Upload results
  if: always()
  uses: actions/upload-artifact@v4
  with:
    name: authprobe
    path: out/

The step fails (non-zero exit) if any finding is high or above, blocking a merge that reintroduces a BOLA/IDOR. Point the JUnit file (out/authprobe.xml) at your test-reporting UI to see findings as failed test cases.

Thresholds

Set settings.fail_on (or --fail-on) to critical, high, medium, low, or info to tune strictness. Teams typically start at high and tighten to medium once identifiers are non-enumerable.