SecOpsPipe logo SecOpsPipe A XYZ Managed Inc.
product
Documentation

Get scanning in minutes

Everything you need to wire SecOpsPipe into your CI/CD pipeline — quick start, API reference, and SDKs.

Quick start

Four steps to secure CI

1. Get your API key

Sign up and grab a project API key from your dashboard. Every key is scoped to a single project.

2. Add the GitHub Action

Drop the workflow below into .github/workflows/secopspipe.yml and store your key as a repo secret.

# .github/workflows/secopspipe.yml
name: SecOpsPipe Scan
on: [push, pull_request]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Run SecOpsPipe Scan
        uses: secopspipe/scan-action@v1
        with:
          api-key: ${{ secrets.SECOPSPIPE_API_KEY }}
          fail-on: high

3. Open a pull request

SecOpsPipe scans the diff at the edge and posts findings back as a check on your PR — usually in under a second.

4. Or call the API directly

Prefer to trigger scans yourself? Hit the scan endpoint from any pipeline, script, or terminal.

# Trigger a scan for a repo + ref
curl -X POST https://api.secopspipe.dev/v1/scan \
  -H "Authorization: Bearer $SECOPSPIPE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"repo": "your-org/your-repo", "ref": "main"}'
{
  "scan_id": "scn_8f3a1c2d",
  "status": "queued",
  "repo": "your-org/your-repo",
  "ref": "main"
}
Reference

API overview

POST/v1/scanTrigger a new scan for a repo and ref
GET/v1/scan/{id}Fetch scan status and summary
GET/v1/scan/{id}/resultsFetch full findings — dependencies, secrets, and SAST
GET/v1/projectsList every project connected to your account
DELETE/v1/scan/{id}Cancel a running scan
SDKs

Use your language

Node.js

Official SDK for Node and TypeScript projects.

npm install @secopspipe/sdk

Python

Drop-in client for scripts, CI tools, and notebooks.

pip install secopspipe

Go

Lightweight client for Go services and CLIs.

go get github.com/secopspipe/secopspipe-go

GitHub Action

Zero-install scanning straight from your workflow.

uses: secopspipe/scan-action@v1

Ready to scan?

Get an API key and add one YAML file. Your next pull request will thank you.

Start scanning free