Everything you need to wire SecOpsPipe into your CI/CD pipeline — quick start, API reference, and SDKs.
Sign up and grab a project API key from your dashboard. Every key is scoped to a single project.
Drop the workflow below into .github/workflows/secopspipe.yml and store your key as a repo secret.
# .github/workflows/secopspipe.yml name: SecOpsPipe Scan on: [push, pull_request] jobs: scan: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - name: Run SecOpsPipe Scan uses: secopspipe/scan-action@v1 with: api-key: ${{ secrets.SECOPSPIPE_API_KEY }} fail-on: high
SecOpsPipe scans the diff at the edge and posts findings back as a check on your PR — usually in under a second.
Prefer to trigger scans yourself? Hit the scan endpoint from any pipeline, script, or terminal.
# Trigger a scan for a repo + ref curl -X POST https://api.secopspipe.dev/v1/scan \ -H "Authorization: Bearer $SECOPSPIPE_API_KEY" \ -H "Content-Type: application/json" \ -d '{"repo": "your-org/your-repo", "ref": "main"}'
{
"scan_id": "scn_8f3a1c2d",
"status": "queued",
"repo": "your-org/your-repo",
"ref": "main"
}Official SDK for Node and TypeScript projects.
npm install @secopspipe/sdk
Drop-in client for scripts, CI tools, and notebooks.
pip install secopspipe
Lightweight client for Go services and CLIs.
go get github.com/secopspipe/secopspipe-go
Zero-install scanning straight from your workflow.
uses: secopspipe/scan-action@v1
Get an API key and add one YAML file. Your next pull request will thank you.
Start scanning free