Gate releases by severity threshold, export SARIF/JSON/HTML artifacts, and keep security checks consistent in CI.
- name: Run Fendix scan
run: fendix scan --url ${{ secrets.API_URL }} --format sarif --fail-on HIGH --output fendix.sariffendix_scan:
script:
- fendix scan --url "$API_URL" --format json --fail-on HIGH --output fendix.jsonsh 'fendix scan --url $API_URL --code ./src --format html --output fendix.html --fail-on HIGH'