Integrate GitHub Action

Runtime security monitoring for your CI workflows in GitHub actions.

1. Open your project's repository in GitHub. In your repository, go to the "Actions" tab.

2. Click "New Workflow" and create a new workflow file in .github/workflows

3. Add the listen.dev GitHub Action and include the API key as a secret.

        uses: listendev/action@v0.12
        with: 
          jwt: ${{ secrets.LSTN_API_KEY }}
          ci: only

To instrument an existing workflow, we recommend adding the step on top of your workflow file after the checkout step.

example workflow file with listen.dev

Commit and push the changes to activate the integration.

Scans are only invoked on events of type pull_request. Make sure this is configured on your desired branches on top of the workflow file.