CI PIPELINES
CI/CD PIPELINE INTEGRATION
Plug GitRabbit directly into your deployment pipelines.
GitRabbit integrates with all major CI/CD engines. Running code audits inside your CI/CD pipelines ensures that no code gets merged or deployed without passing security rules, syntax verification, and standard compliance audits.
Key_Capabilities
GitHub Actions
Native action setup with automatic PR comments and state check reporting.
GitLab CI & Bitbucket Pipelines
Integrate using container runners and build steps.
Custom Webhooks & Triggers
Trigger scans manually from custom pipelines or API hooks.
Setup_Sequence
1
Step 01
Generate Secret Key
Navigate to your GitRabbit organization Settings and generate a Pipeline Token.
2
Step 02
Add Pipeline Configuration
Save the token as an environment variable (GITRABBIT_TOKEN) in your CI provider.
3
Step 03
Add Pipeline Job
Create a job in your pipeline configuration file (e.g. '.github/workflows/gitrabbit.yml').
Code_Example
.github/workflows/gitrabbit.yml config file
name: GitRabbit Code Review
on: [pull_request]
jobs:
review:
runs-on: ubuntu-latest
steps:
- name: Checkout Source Code
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: GitRabbit Scan
uses: gitrabbit/actions-scan@v2
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITRABBIT_TOKEN: ${{ secrets.GITRABBIT_TOKEN }}Pro_Tips
- ✦Configure fetch-depth: 0 to ensure GitRabbit has complete access to the git logs required for impact analysis.
- ✦Set 'fail-on-alerts: true' to reject the build step if critical vulnerabilities are discovered.