Skip to content

Environment Variables

In the CI pipeline, the analyzer scans, parses the results, and uploads them to the Code Secure Dashboard. An access token is required for authentication with the Code Secure Dashboard.

The following are the required environment variables.

ENV Require Description
CODE_SECURE_URL true The URL of code secure dashboard. Example: https://finding.example.com
CODE_SECURE_TOKEN true The CI Access Token used for authentication with the Code Secure Dashboard.
GITLAB_TOKEN optional The GitLab token used to comment on merge requests when new findings are detected.
How to get CODE_SECURE_TOKEN?

Go to Setting > Access Token in the Code Secure Dashboard.

How to get GITLAB_TOKEN?

Go to Settings > Access Tokens in the GitLab project and create a GitLab access token with the role Reporter and the api scope.