CI and automation

Do not put eresus-guard scan in a pipeline as the customer product. Human review stays in Workbench.

If your contract includes automation, Eresus provisions it privately. This site does not publish an API origin for CI jobs.

Pattern

  1. Keep credentials out of logs.
  2. Point jobs at staging unless production is explicitly authorized.
  3. Review findings in Workbench. CI should not be the only triage surface.

See API targets.

Need a workflow that is not documented here? Email contact@eresussec.com.