Quick start

Follow the simple guide below to integrate security monitoring into your GitHub actions workflows.

1. Sign up on listen.dev and generate API Token

• Visit the listen.dev dashboard and sign up. Create an org and project.

• Generate your API token from the project settings–keeping it handy for next step.

2. Integrate GItHub Action in your workflow

• Add the API token generated in the previous step as a secret in your GitHub repo.

• Add listen.dev as the first step in your existing workflow file in .github/workflows, or to a new one, as shown below:

- uses: listendev/action@v0.12
  with:
    jwt: ${{ secrets.LSTN_API_KEY }}
    ci: only

We recommend adding listen.dev in your workflow file after the repo checkout step - before adding or installing new 3rd party dependencies or tools

3. Monitor your workflow runs & see results

After each workflow run, you can see detailed security insights in the listen.dev dashboard.

Network insights for a workflow run.

Woot! you just completed your first e2e workflow in listen.dev! 🎉