CI integration
Upload reports from pull request or scheduled workflows.
Use CI to keep audit history current without making the dashboard clone your repository.
name: Audit Sherpa
on:
workflow_dispatch:
schedule:
- cron: "0 8 * * 1"
jobs:
audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: dart-lang/setup-dart@v1
- run: dart pub get
- run: dart run Audit Sherpa generate --project-root . --bundle reports/audit_bundle --repository-slug ${{ github.repository }} --branch ${{ github.ref_name }} --commit-sha ${{ github.sha }}
- run: dart run Audit Sherpa validate reports/audit_bundle
- run: dart run Audit Sherpa upload --bundle reports/audit_bundle --repository-slug ${{ github.repository }}
env:
AUDIT_SHERPA_TOKEN: ${{ secrets.AUDIT_SHERPA_TOKEN }}