GitHub Actions

Integrate Pinelight into your CI/CD pipeline using GitHub Actions.

Setup

  1. Generate an API key in your Dashboard
  2. Add the key as a secret in your repository: PINELIGHT_API_KEY

Workflow Example

name: Security Scan

on: [push, pull_request]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      
      - name: Pinelight Scan
        uses: pinelight/scan-action@v1
        with:
          api-key: ${{ secrets.PINELIGHT_API_KEY }}
          fail-on-findings: true
          max-severity: high

Action Inputs

InputRequiredDescription
api-keyYesYour Pinelight API key
fail-on-findingsNoFail the job if findings are found (default: true)
max-severityNoFail on findings at or above this severity (low, medium, high, critical)

Usage Limits

Free

100 scans/month

Pro

Unlimited scans

Enterprise

Custom limits