Skip to content

add multi-platform CI/CD templates (GitLab, Azure DevOps, Jenkins - #12

Merged
cloakmaster merged 1 commit into
inkog-io:mainfrom
monssefbaakka:main
Mar 21, 2026
Merged

add multi-platform CI/CD templates (GitLab, Azure DevOps, Jenkins#12
cloakmaster merged 1 commit into
inkog-io:mainfrom
monssefbaakka:main

Conversation

@monssefbaakka

Copy link
Copy Markdown

Currently, Inkog only provides a GitHub Actions workflow for CI/CD integration. Many enterprise teams using GitLab CI, Azure DevOps, or Jenkins have no ready-made pipeline templates, which forces manual setup and slows down adoption.

This PR introduces out-of-the-box CI/CD templates for the major enterprise platforms and maps Inkog's core CLI options (policy, severity, path) to their respective pipeline variable syntaxes. It also configures them to natively ingest SARIF reports directly into their security dashboards.

Changes Included

  • 🦊 GitLab CI: Added .gitlab-ci.yml template that uploads SAST artifacts directly to GitLab's Native Security Dashboard.
  • ☁️ Azure DevOps: Added azure-pipelines.yml demonstrating how to run inline bash steps and store artifacts for the SARIF viewer extension.
  • 🏗️ Jenkins: Added a declarative Jenkinsfile demonstrating credentials binding and publishing results to the Warnings Next Generation plugin.
  • 📚 Documentation: Added a comprehensive CI_CD_INTEGRATION.md guide with setup instructions covering all integrations in one place.

Motivation and Context

These templates provide table-stakes functionality for enterprise adoption. It demonstrates that our scanner logic (install Inkog, run scan, upload SARIF artifact) is identical and easily integrated across any CI platform, while bridging the gap between action.yml and other platforms.

Type of change

@cloakmaster cloakmaster left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great contribution! Clean, focused, and exactly what enterprise teams need for adoption beyond GitHub Actions.

Reviewed the templates — GitLab SAST artifact integration, Azure SARIF viewer, and Jenkins Warnings NG plugin usage all look correct. The documentation is well-structured.

Merging. Thank you @monssefbaakka! 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants